CVE-2020-3761: High severity Adobe ColdFusion vulnerability
Published Mar 25, 2020
·Updated
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory.
Affected Software
22 affected components
Adobe ColdFusion=2016
Adobe ColdFusion=2016-update1
Adobe ColdFusion=2016-update10
Adobe ColdFusion=2016-update11
Adobe ColdFusion=2016-update12
Adobe ColdFusion=2016-update13
Adobe ColdFusion=2016-update2
Adobe ColdFusion=2016-update3
Adobe ColdFusion=2016-update4
Adobe ColdFusion=2016-update5
Adobe ColdFusion=2016-update6
Adobe ColdFusion=2016-update7
Adobe ColdFusion=2016-update8
Adobe ColdFusion=2016-update9
Adobe ColdFusion=2018
Adobe ColdFusion=2018-update1
Adobe ColdFusion=2018-update2
Adobe ColdFusion=2018-update3
Adobe ColdFusion=2018-update4
Adobe ColdFusion=2018-update5
Adobe ColdFusion=2018-update6
Adobe ColdFusion=2018-update7
Event History
Mar 25, 2020
CVE Published
via MITRE·07:11 PM
Data Sourced
via MITRE·07:11 PM
DescriptionWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-3761?
CVE-2020-3761 is a remote file read vulnerability in ColdFusion versions 2016 and 2018.
2
How severe is CVE-2020-3761?
CVE-2020-3761 has a severity score of 7.5, which is considered high.
3
What software versions are affected by CVE-2020-3761?
ColdFusion versions 2016 and 2018 are affected by CVE-2020-3761.
4
What can a successful exploitation of CVE-2020-3761 lead to?
A successful exploitation of CVE-2020-3761 can lead to arbitrary file read from the ColdFusion install directory.
5
Where can I find more information about CVE-2020-3761?
You can find more information about CVE-2020-3761 on Adobe's security advisory page: https://helpx.adobe.com/security/products/coldfusion/apsb20-16.html