CVE-2020-3796: Medium severity adobe coldfusion vulnerability
Published Jun 26, 2020
·Updated
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.
Affected Software
24 affected components
Adobe ColdFusion=2016
Adobe ColdFusion=2016-update1
Adobe ColdFusion=2016-update10
Adobe ColdFusion=2016-update11
Adobe ColdFusion=2016-update12
Adobe ColdFusion=2016-update13
Adobe ColdFusion=2016-update14
Adobe ColdFusion=2016-update2
Adobe ColdFusion=2016-update3
Adobe ColdFusion=2016-update4
Adobe ColdFusion=2016-update5
Adobe ColdFusion=2016-update6
Adobe ColdFusion=2016-update7
Adobe ColdFusion=2016-update8
Adobe ColdFusion=2016-update9
Adobe ColdFusion=2018
Adobe ColdFusion=2018-update1
Adobe ColdFusion=2018-update2
Adobe ColdFusion=2018-update3
Adobe ColdFusion=2018-update4
Adobe ColdFusion=2018-update5
Adobe ColdFusion=2018-update6
Adobe ColdFusion=2018-update7
Adobe ColdFusion=2018-update8
Event History
Jun 26, 2020
CVE Published
via MITRE·08:21 PM
Data Sourced
via MITRE·08:21 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2020-3796.
2
Which versions of ColdFusion are affected by this vulnerability?
ColdFusion 2016 and ColdFusion 2018 versions are affected by this vulnerability.
3
What is the severity level of CVE-2020-3796?
CVE-2020-3796 has a severity level of medium, with a severity value of 6.5.
4
What is the impact of successful exploitation of this vulnerability?
Successful exploitation of this vulnerability could lead to system file structure disclosure.
5
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the Adobe ColdFusion security advisory page: https://helpx.adobe.com/security/products/coldfusion/apsb20-18.html