CVE-2005-4345 Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers to obtain the hash and gain privileges.
HighCVSS 7.2
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers to obtain the hash and gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia coldfusion | = 7.0 | No fix listed |
References
- 18078 patch third-party-advisory vendor-advisory
- 1015371 patch vdb-entry vendor-advisory
- www.macromedia.com patch
- 15904 patch vdb-entry
- ADV-2005-2948 vdb-entry