CVE-2004-2331 ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive information by using Java reflection methods to access trusted Java objects without using...
MediumCVSS 5.5
EPSS 0.67%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive information by using Java reflection methods to access trusted Java objects without using the CreateObject function or cfobject tag.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia coldfusion | = 6.1 | No fix listed |
References
- 10743 third-party-advisory url-repurposed
- www.macromedia.com patch vendor-advisory
- 9521 broken-link patch third-party-advisory vdb-entry
- coldfusion-mx-sandbox-bypass(14984) third-party-advisory vdb-entry