Adobe.ColdFusion.CVE-2023-29298.Authentication.Bypass

Description

This indicates an attack attempt to exploit an Authentication Bypass Vulnerability in Adobe ColdFusion.
This vulnerability is due to improper access control in the vulnerable application. An unauthenticated, remote attacker may be able to exploit this via a crafted request. Successful exploitation could lead to arbitrary code execution within the security context of the affected system.

Outbreak Alert

FortiGuards labs observed extremely widespread exploitation attempts relating to security bypass vulnerabilities in Adobe ColdFusion. Successful exploitation could result in access of the ColdFusion Administrator endpoints.

View the full Outbreak Alert Report

Affected Products

Adobe ColdFusion CF2018 update 16
Adobe ColdFusion CF2021 update 6
Adobe ColdFusion CF2023 GA Release (2023.0.0) and earlier

Impact

Security Bypass: Remote attackers can bypass security checks of vulnerable systems.

Recommended Actions

Apply the most recent upgrades or patches from the vendor.
https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html

References