CVE-2022-38420CWE-798

Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-service

High · published October 14, 2022

CVSS v3.1
7.5
EPSS
45%
Percentile
98.8
In the wild
Unconfirmed
What it is

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Use of Hard-coded Credentials vulnerability that could result in application denial-of-service by gaining access to start/stop arbitrary services. Exploitation of this issue does not require user interaction.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.44691 · 98.8th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2022-10-14T19:42Z
EPSS history
Timeline
  • 14 OCT 19:42Z
    Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-service
    cvelistv5