CVE-2023-29301CWE-307

Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass

High · published July 12, 2023

CVSS v3.1
7.5
EPSS
35%
Percentile
98.4
In the wild
Unconfirmed
What it is

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the confidentiality of the user. Exploitation of this issue does not require user interaction.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.34713 · 98.4th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2023-07-12T15:46Z
EPSS history
Timeline
  • 12 JUL 15:46Z
    Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass
    cvelistv5