CVE-2018-15962: Infoleak

Published Sep 25, 2018

Updated

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a directory listing vulnerability. Successful exploitation could lead to information disclosure.

Affected Software

23 affected components

Adobe ColdFusion=11.0

Adobe ColdFusion=11.0-update1

Adobe ColdFusion=11.0-update10

Adobe ColdFusion=11.0-update11

Adobe ColdFusion=11.0-update12

Adobe ColdFusion=11.0-update13

Adobe ColdFusion=11.0-update14

Adobe ColdFusion=11.0-update2

Adobe ColdFusion=11.0-update3

Adobe ColdFusion=11.0-update4

Adobe ColdFusion=11.0-update5

Adobe ColdFusion=11.0-update6

Adobe ColdFusion=11.0-update7

Adobe ColdFusion=11.0-update8

Adobe ColdFusion=11.0-update9

Adobe ColdFusion=2016

Adobe ColdFusion=2016-update1

Adobe ColdFusion=2016-update2

Adobe ColdFusion=2016-update3

Adobe ColdFusion=2016-update4

Adobe ColdFusion=2016-update5

Adobe ColdFusion=2016-update6

Adobe ColdFusion=2018

Event History

Sep 25, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-15962?

CVE-2018-15962 is a directory listing vulnerability in Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier.

What is the severity of CVE-2018-15962?

The severity of CVE-2018-15962 is medium with a CVSS score of 5.3.

How does CVE-2018-15962 impact Adobe ColdFusion?

CVE-2018-15962 allows an attacker to exploit a directory listing vulnerability, potentially leading to information disclosure.

Which versions of Adobe ColdFusion are affected by CVE-2018-15962?

Adobe ColdFusion versions 11.0, Update 6 and earlier, and Update 14 and earlier are affected by CVE-2018-15962.

How can CVE-2018-15962 be mitigated?

Apply the necessary security updates provided by Adobe to fix the directory listing vulnerability in Adobe ColdFusion.