CVE-2006-3979 The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the ColdFusion Administrator.
HighCVSS 7.2
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the ColdFusion Administrator.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia coldfusion | = 7.0 | No fix listed |
| macromedia coldfusion | = 7.02 | No fix listed |
References
- 21421 third-party-advisory
- 1016660 vdb-entry
- www.adobe.com patch
- 19426 vdb-entry
- ADV-2006-3224 vdb-entry
- coldfusion-adminapi-auth-bypass(28294) vdb-entry