First published: Wed Oct 15 2014(Updated: )
Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows local users to bypass intended IP-based access restrictions via unspecified vectors.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe ColdFusion | =9.0 | |
Adobe ColdFusion | =9.0-update_10 | |
Adobe ColdFusion | =9.0-update_12 | |
Adobe ColdFusion | =9.0.1 | |
Adobe ColdFusion | =9.0.1-update_11 | |
Adobe ColdFusion | =9.0.1-update_9 | |
Adobe ColdFusion | =9.0.2 | |
Adobe ColdFusion | =9.0.2-update_4 | |
Adobe ColdFusion | =9.0.2-update_6 | |
Adobe ColdFusion | =10.0 | |
Adobe ColdFusion | =10.0-update1 | |
Adobe ColdFusion | =10.0-update11 | |
Adobe ColdFusion | =10.0-update12 | |
Adobe ColdFusion | =10.0-update2 | |
Adobe ColdFusion | =10.0-update3 | |
Adobe ColdFusion | =10.0-update4 | |
Adobe ColdFusion | =10.0-update8 | |
Adobe ColdFusion | =11.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-0572 is classified as a medium-severity vulnerability that allows local users to bypass IP-based access restrictions.
To fix CVE-2014-0572, update Adobe ColdFusion to the latest version or apply the security updates that address this vulnerability.
CVE-2014-0572 affects Adobe ColdFusion versions 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2.
CVE-2014-0572 is a local vulnerability, meaning it requires local access to the system to exploit.
Due to CVE-2014-0572, local users could potentially gain unauthorized access to services restricted by IP-based controls.