CVE-2023-38206: ColdFusion | Improper Access Control (CWE-284)
First published: Thu Sep 14 2023(Updated: )
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints resulting in a low-confidentiality impact. Exploitation of this issue does not require user interaction.
Credit: psirt@adobe.com psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe ColdFusion | =2018 | |
| Adobe ColdFusion | =2018-update1 | |
| Adobe ColdFusion | =2018-update10 | |
| Adobe ColdFusion | =2018-update11 | |
| Adobe ColdFusion | =2018-update12 | |
| Adobe ColdFusion | =2018-update13 | |
| Adobe ColdFusion | =2018-update14 | |
| Adobe ColdFusion | =2018-update15 | |
| Adobe ColdFusion | =2018-update16 | |
| Adobe ColdFusion | =2018-update18 | |
| Adobe ColdFusion | =2018-update2 | |
| Adobe ColdFusion | =2018-update3 | |
| Adobe ColdFusion | =2018-update4 | |
| Adobe ColdFusion | =2018-update5 | |
| Adobe ColdFusion | =2018-update6 | |
| Adobe ColdFusion | =2018-update7 | |
| Adobe ColdFusion | =2018-update8 | |
| Adobe ColdFusion | =2018-update9 | |
| Adobe ColdFusion | =2021 | |
| Adobe ColdFusion | =2021-update1 | |
| Adobe ColdFusion | =2021-update2 | |
| Adobe ColdFusion | =2021-update3 | |
| Adobe ColdFusion | =2021-update4 | |
| Adobe ColdFusion | =2021-update5 | |
| Adobe ColdFusion | =2021-update6 | |
| Adobe ColdFusion | =2021-update7 | |
| Adobe ColdFusion | =2021-update8 | |
| Adobe ColdFusion | =2023 | |
| Adobe ColdFusion | =2023-update1 | |
| Adobe ColdFusion | =2023-update2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this Adobe ColdFusion vulnerability?
The vulnerability ID of this Adobe ColdFusion vulnerability is CVE-2023-38206.
What is the severity of the CVE-2023-38206 vulnerability?
The severity of the CVE-2023-38206 vulnerability is medium.
How does the CVE-2023-38206 vulnerability affect Adobe ColdFusion?
The CVE-2023-38206 vulnerability affects Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier).
What is the impact of the CVE-2023-38206 vulnerability?
The impact of the CVE-2023-38206 vulnerability is an improper access control vulnerability that could result in a security feature bypass.
How can I fix the CVE-2023-38206 vulnerability in Adobe ColdFusion?
To fix the CVE-2023-38206 vulnerability in Adobe ColdFusion, update to the latest version available.
- collector/nvd-api
- collector/nvd-index
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/references
- agent/title
- agent/first-publish-date
- agent/description
- agent/tags
- agent/event
- vendor/adobe
- canonical/adobe coldfusion
- version/adobe coldfusion/2018
- version/adobe coldfusion/2018-update1
- version/adobe coldfusion/2018-update10
- version/adobe coldfusion/2018-update11
- version/adobe coldfusion/2018-update12
- version/adobe coldfusion/2018-update13
- version/adobe coldfusion/2018-update14
- version/adobe coldfusion/2018-update15
- version/adobe coldfusion/2018-update16
- version/adobe coldfusion/2018-update18
- version/adobe coldfusion/2018-update2
- version/adobe coldfusion/2018-update3
- version/adobe coldfusion/2018-update4
- version/adobe coldfusion/2018-update5
- version/adobe coldfusion/2018-update6
- version/adobe coldfusion/2018-update7
- version/adobe coldfusion/2018-update8
- version/adobe coldfusion/2018-update9
- version/adobe coldfusion/2021
- version/adobe coldfusion/2021-update1
- version/adobe coldfusion/2021-update2
- version/adobe coldfusion/2021-update3
- version/adobe coldfusion/2021-update4
- version/adobe coldfusion/2021-update5
- version/adobe coldfusion/2021-update6
- version/adobe coldfusion/2021-update7
- version/adobe coldfusion/2021-update8
- version/adobe coldfusion/2023
- version/adobe coldfusion/2023-update1
- version/adobe coldfusion/2023-update2