CVE-2005-4345: High severity Macromedia ColdFusion vulnerability
Published Dec 18, 2005
·Updated
Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers to obtain the hash and gain privileges.
Affected Software
1 affected component
Macromedia ColdFusion=7.0
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 18, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-4345?
CVE-2005-4345 is considered a high-severity vulnerability due to its potential to allow unauthorized access to sensitive data.
2
How do I fix CVE-2005-4345?
To fix CVE-2005-4345, upgrade to a version of ColdFusion that does not expose the password hash through API calls.
3
What impact does CVE-2005-4345 have on system security?
CVE-2005-4345 allows local developers to obtain the Administrator's password hash, enabling them to gain unauthorized privileges.
4
Which versions of ColdFusion are affected by CVE-2005-4345?
CVE-2005-4345 specifically affects Adobe ColdFusion MX 7.0.
5
Is there a workaround for CVE-2005-4345?
There are no official workarounds for CVE-2005-4345; the recommended action is to apply patches or upgrade the software.