CVE-2020-9672: High severity adobe coldfusion vulnerability

Published Jul 17, 2020

Updated

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.

Affected Software

26 affected components

Adobe ColdFusion=2016

Adobe ColdFusion=2016-update1

Adobe ColdFusion=2016-update10

Adobe ColdFusion=2016-update11

Adobe ColdFusion=2016-update12

Adobe ColdFusion=2016-update13

Adobe ColdFusion=2016-update14

Adobe ColdFusion=2016-update15

Adobe ColdFusion=2016-update2

Adobe ColdFusion=2016-update3

Adobe ColdFusion=2016-update4

Adobe ColdFusion=2016-update5

Adobe ColdFusion=2016-update6

Adobe ColdFusion=2016-update7

Adobe ColdFusion=2016-update8

Adobe ColdFusion=2016-update9

Adobe ColdFusion=2018

Adobe ColdFusion=2018-update1

Adobe ColdFusion=2018-update2

Adobe ColdFusion=2018-update3

Adobe ColdFusion=2018-update4

Adobe ColdFusion=2018-update5

Adobe ColdFusion=2018-update6

Adobe ColdFusion=2018-update7

Adobe ColdFusion=2018-update8

Adobe ColdFusion=2018-update9

Event History

Jul 17, 2020

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via NVD·12:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability identifier for this Adobe ColdFusion vulnerability?

The vulnerability identifier for this Adobe ColdFusion vulnerability is CVE-2020-9672.

What is the severity of CVE-2020-9672?

The severity of CVE-2020-9672 is high with a score of 7.8.

What is the affected software for this vulnerability?

The affected software for this vulnerability is Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions.

What is the description of this vulnerability?

This vulnerability in Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions allows for dll search-order hijacking, which could lead to privilege escalation.

How can this vulnerability be exploited?

This vulnerability can be exploited by exploiting the dll search-order hijacking vulnerability in Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions.