CVE Vulnerabilities

CVE-2008-1203

Published: Mar 12, 2008 | Modified: Aug 08, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote attackers to conduct brute force attacks without detection.

Affected Software

Name Vendor Start Version End Version
Coldfusion Adobe 8.0 8.0
Coldfusion Adobe 7.0 7.0

References