CVE-2019-8072: High severity adobe coldfusion vulnerability

Published Sep 27, 2019

Updated

ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

Affected Software

17 affected components

Adobe ColdFusion=2016

Adobe ColdFusion=2016-update1

Adobe ColdFusion=2016-update10

Adobe ColdFusion=2016-update11

Adobe ColdFusion=2016-update2

Adobe ColdFusion=2016-update3

Adobe ColdFusion=2016-update4

Adobe ColdFusion=2016-update5

Adobe ColdFusion=2016-update6

Adobe ColdFusion=2016-update7

Adobe ColdFusion=2016-update8

Adobe ColdFusion=2016-update9

Adobe ColdFusion=2018

Adobe ColdFusion=2018-update1

Adobe ColdFusion=2018-update2

Adobe ColdFusion=2018-update3

Adobe ColdFusion=2018-update4

Event History

Sep 27, 2019

CVE Published

via MITRE·03:16 PM

Data Sourced

via MITRE·03:16 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-8072?

CVE-2019-8072 refers to a security bypass vulnerability in ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier.

What is the severity of CVE-2019-8072?

CVE-2019-8072 has a severity rating of 7.5 (high).

What is the affected software for CVE-2019-8072?

The affected software versions include ColdFusion 2018- update 4 and earlier, and ColdFusion 2016- update 11 and earlier.

What is the potential impact of CVE-2019-8072?

Successful exploitation of CVE-2019-8072 could lead to information disclosure in the context of the current user.

How can I fix CVE-2019-8072?

To fix CVE-2019-8072, it is recommended to update ColdFusion 2018 to update 5 or later, or ColdFusion 2016 to update 12 or later.