CVE-2004-2204: High severity macromedia coldfusion vulnerability
Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject function or CFOBJECT tag enabled, allows local users to conduct unauthorized activities and obtain administrative passwords by creating CFML scripts that use CreateObject or CFOBJECT.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2204?
CVE-2004-2204 is considered a medium-risk vulnerability that can lead to unauthorized access to administrative passwords.
How do I fix CVE-2004-2204?
To fix CVE-2004-2204, disable the CreateObject function and CFOBJECT tag to prevent local users from executing unauthorized CFML scripts.
Who is affected by CVE-2004-2204?
CVE-2004-2204 affects users running Macromedia ColdFusion MX versions 6.0 and 6.1 with the CreateObject function or CFOBJECT tag enabled.
What are the potential impacts of CVE-2004-2204?
The potential impacts of CVE-2004-2204 include unauthorized activities and acquisition of sensitive administrative passwords.
Is CVE-2004-2204 still a concern today?
While CVE-2004-2204 pertains to older software versions, organizations still using ColdFusion MX 6.0 or 6.1 should consider it a concern.