Adobe.ColdFusion.IPFilterUtils.Authentication.Bypass

Description

This indicates an attack attempt to exploit an Authentication Bypass Vulnerability in Adobe Systems ColdFusion.
The vulnerability is due to improper validation of the URL path by the IPFilterUtils class. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted requests to the target server. Successful exploitation could result in access to the ColdFusion Administrator endpoints.

Outbreak Alert

FortiGuards labs observed extremely widespread exploitation attempts relating to security bypass vulnerabilities in Adobe ColdFusion. Successful exploitation could result in access of the ColdFusion Administrator endpoints.

View the full Outbreak Alert Report

Affected Products

Adobe Systems ColdFusion 2018 prior to Update 19
Adobe Systems ColdFusion 2021 prior to Update 9
Adobe Systems ColdFusion 2023 prior to Update 3

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html