BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2023-38205ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.

7.5 HIGHEPSS 99.80%⚡ Known Exploited (CISA KEV)NVD: Analyzed

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
7.5HIGH3.1adobe (CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA required action

⚡ Known exploited · remediation due Aug 10, 2023

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Details

CVE ID
CVE-2023-38205
Status
Analyzed
Assigner (CNA)
adobe
Published
Sep 14, 2023
Last modified
2026-06-17 06:09 UTC
Weaknesses
  • CWE-284 · Improper Access Control (CWE-284)

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-09 15:15 UTC.