7.5

CVE-2005-4342

ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to "bypass security controls," aka "JRun Clustered Sandbox Security Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Macromedia ≫ Coldfusion Version 6.0
Macromedia ≫ Coldfusion Version 6.1
Macromedia ≫ Coldfusion Version 6.1 Edition enterprise_with_jrun
Macromedia ≫ Coldfusion Version 6.1 Edition j2ee_application_server
Macromedia ≫ Coldfusion Version 7.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.7% 0.742
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/18078
Patch
Vendor Advisory
http://securitytracker.com/id?1015369
Patch
Vendor Advisory
http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html
Patch
http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html
Patch
http://www.securityfocus.com/bid/15904
Patch
http://www.vupen.com/english/advisories/2005/2948