Adobe.ColdFusion.CVE-2023-29301.Authentication.Bypass

Description

This indicates an attack attempt to exploit an Authentication Bypass Vulnerability in Adobe ColdFusion.
This vulnerability is due to improper access control in the vulnerable application. An unauthenticated, remote attacker may be able to exploit this to gain access to vulnerable systems. The signature is triggered if there are more than 30 attempts within 10 seconds. The threshold is configurable based on user's environment.

Affected Products

Adobe ColdFusion CF2018 update 16
Adobe ColdFusion CF2021 update 6
Adobe ColdFusion CF2023 GA Release (2023.0.0) and earlier

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrades or patches from the vendor.
https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html

References