CVE-2024-45113CWE-287

ColdFusion | Improper Authentication (CWE-287)

High · published September 13, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
48.1
In the wild
Unconfirmed
What it is

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access and affect the integrity of the application. Exploitation of this issue does not require user interaction.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00601 · 48.1th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-09-13T09:18Z
EPSS history
Timeline
  • 13 SEP 09:18Z
    ColdFusion | Improper Authentication (CWE-287)
    cvelistv5