CVE-2019-8073: Command Injection

Published Sep 27, 2019

Updated

ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Command Injection via Vulnerable component vulnerability. Successful exploitation could lead to Arbitrary code execution in the context of the current user.

Affected Software

17 affected components

Adobe ColdFusion=2016

Adobe ColdFusion=2016-update1

Adobe ColdFusion=2016-update10

Adobe ColdFusion=2016-update11

Adobe ColdFusion=2016-update2

Adobe ColdFusion=2016-update3

Adobe ColdFusion=2016-update4

Adobe ColdFusion=2016-update5

Adobe ColdFusion=2016-update6

Adobe ColdFusion=2016-update7

Adobe ColdFusion=2016-update8

Adobe ColdFusion=2016-update9

Adobe ColdFusion=2018

Adobe ColdFusion=2018-update1

Adobe ColdFusion=2018-update2

Adobe ColdFusion=2018-update3

Adobe ColdFusion=2018-update4

Event History

Sep 27, 2019

CVE Published

via MITRE·03:19 PM

Data Sourced

via MITRE·03:19 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2019-8073.

What is the severity rating of CVE-2019-8073?

CVE-2019-8073 has a severity rating of 9.8, which is critical.

What is the affected software for CVE-2019-8073?

The affected software for CVE-2019-8073 is ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier.

What is the description of CVE-2019-8073?

CVE-2019-8073 is a Command Injection via Vulnerable component vulnerability in ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier. Successful exploitation could lead to Arbitrary code execution in the context of the current user.

How can I fix CVE-2019-8073?

To fix CVE-2019-8073, update ColdFusion 2018 to the latest version or apply the recommended security patch provided by Adobe.