CVE Vulnerabilities

CVE-2006-3979

Published: Aug 09, 2006 | Modified: Jul 20, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using programmatic access to the adminAPI instead of the ColdFusion Administrator.

Affected Software

Name Vendor Start Version End Version
Coldfusion Macromedia 7.0 (including) 7.0 (including)
Coldfusion Macromedia 7.02 (including) 7.02 (including)

References