CVE-2014-0570: CSRF

Published Oct 15, 2014

Updated

Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected Software

18 affected components

Adobe ColdFusion=9.0

Adobe ColdFusion=9.0-update_10

Adobe ColdFusion=9.0-update_12

Adobe ColdFusion=9.0.1

Adobe ColdFusion=9.0.1-update_11

Adobe ColdFusion=9.0.1-update_9

Adobe ColdFusion=9.0.2

Adobe ColdFusion=9.0.2-update_4

Adobe ColdFusion=9.0.2-update_6

Adobe ColdFusion=10.0

Adobe ColdFusion=10.0-update1

Adobe ColdFusion=10.0-update11

Adobe ColdFusion=10.0-update12

Adobe ColdFusion=10.0-update2

Adobe ColdFusion=10.0-update3

Adobe ColdFusion=10.0-update4

Adobe ColdFusion=10.0-update8

Adobe ColdFusion=11.0

Remediation

Patch Available

http://helpx.adobe.com/security/products/coldfusion/apsb14-23.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-0570?

CVE-2014-0570 is categorized as a critical vulnerability due to its potential impact on user authentication.

How do I fix CVE-2014-0570?

To fix CVE-2014-0570, update your Adobe ColdFusion to the latest version or apply the relevant patches as specified by Adobe.

Which versions of Adobe ColdFusion are affected by CVE-2014-0570?

CVE-2014-0570 affects Adobe ColdFusion versions 9.0 through 11.0 prior to specific updates.

What type of vulnerability is CVE-2014-0570?

CVE-2014-0570 is a Cross-site request forgery (CSRF) vulnerability.

What can attackers achieve by exploiting CVE-2014-0570?

Exploiting CVE-2014-0570 can allow attackers to hijack user authentication, compromising user accounts.