CVE-2014-0572

Published: Oct 15, 2014Modified: May 6, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows local users to bypass intended IP-based access restrictions via unspecified vectors.

Affected (18)

Products: Adobe: Coldfusion

Adobe

1 product

Coldfusion

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Adobe Coldfusion	Version 10.0
Adobe Coldfusion	Version 10.0 update11
Adobe Coldfusion	Version 10.0 update12
Adobe Coldfusion	Version 10.0 update1
Adobe Coldfusion	Version 10.0 update2
Adobe Coldfusion	Version 10.0 update3
Adobe Coldfusion	Version 10.0 update4
Adobe Coldfusion	Version 10.0 update8
Adobe Coldfusion	Version 11.0
Adobe Coldfusion	Version 9.0.1
Adobe Coldfusion	Version 9.0.1 update_11
Adobe Coldfusion	Version 9.0.1 update_9
Adobe Coldfusion	Version 9.0.2
Adobe Coldfusion	Version 9.0.2 update_4
Adobe Coldfusion	Version 9.0.2 update_6
Adobe Coldfusion	Version 9.0
Adobe Coldfusion	Version 9.0 update_10
Adobe Coldfusion	Version 9.0 update_12

Related CWEs

CWE-264

References (4)

http://helpx.adobe.com/security/products/coldfusion/apsb14-23.html

Source: psirt@adobe.com

PatchVendor Advisory

http://www.securitytracker.com/id/1031020

Source: psirt@adobe.com

http://helpx.adobe.com/security/products/coldfusion/apsb14-23.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securitytracker.com/id/1031020

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.