Описание
ColdFusion is affected by an Insufficient Session Expiration vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
2.7 Low
CVSS3
Дефекты
Связанные уязвимости
ColdFusion is affected by an Insufficient Session Expiration vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Уязвимость программной платформы ColdFusion, связанная с неверным сроком действия сеанса, позволяющая нарушителю обойти существующие механизмы безопасности
EPSS
2.7 Low
CVSS3