Detections
Analytics
ColdFusion <= 7,0,2,142559 Local Privilege Escalation
high Nessus Network Monitor Plugin ID 3792
Synopsis
The remote host is vulnerable to a flaw that allows for the bypassing of authentication.Description
The remote host is running Macromedia ColdFusion, a web application server. This version of Macromedia is vulnerable to a flaw where a user with local system access can bypass authentication and gain administrative access over the application. Successful exploitation impacts confidentiality, integrity, and availability.Solution
Upgrade to version 7,0,2,142559 or higher.See Also
http://www.adobe.com/support/security/bulletins/apsb06-17.html
Plugin Details
Severity: High
ID: 3792
Family: Web Servers
Published: 10/11/2006
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.6
Temporal Score: 4.9
Vector: CVSS2#AV:L/AC:M/Au:S/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 7
Temporal Score: 6.1
Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:adobe:coldfusion
Reference Information
CVE: CVE-2006-3978, CVE-2007-1874