Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveAdobeCVE-2023-29301
HistoryJul 12, 2023 - 4:15 p.m.

CVE-2023-29301

2023-07-1216:15:11
CWE-307
adobe
web.nvd.nist.gov
40
adobe
coldfusion
cve-2023-29301
vulnerability
security
excessive authentication attempts
confidentiality

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

50.4%

JSON

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the confidentiality of the user. Exploitation of this issue does not require user interaction.

Affected configurations

Nvd
Vulners
Node
adobecoldfusionRange2023–2023.0.0.330468
OR
adobecoldfusionMatch2018-
OR
adobecoldfusionMatch2018update1
OR
adobecoldfusionMatch2018update10
OR
adobecoldfusionMatch2018update11
OR
adobecoldfusionMatch2018update12
OR
adobecoldfusionMatch2018update13
OR
adobecoldfusionMatch2018update14
OR
adobecoldfusionMatch2018update15
OR
adobecoldfusionMatch2018update16
OR
adobecoldfusionMatch2018update2
OR
adobecoldfusionMatch2018update3
OR
adobecoldfusionMatch2018update4
OR
adobecoldfusionMatch2018update5
OR
adobecoldfusionMatch2018update6
OR
adobecoldfusionMatch2018update7
OR
adobecoldfusionMatch2018update8
OR
adobecoldfusionMatch2018update9
OR
adobecoldfusionMatch2021-
OR
adobecoldfusionMatch2021update1
OR
adobecoldfusionMatch2021update2
OR
adobecoldfusionMatch2021update3
OR
adobecoldfusionMatch2021update4
OR
adobecoldfusionMatch2021update5
OR
adobecoldfusionMatch2021update6
VendorProductVersionCPE
adobecoldfusion*cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
adobecoldfusion2018cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*
adobecoldfusion2018cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*
adobecoldfusion2018cpe:2.3:a:adobe:coldfusion:2018:update10:*:*:*:*:*:*
adobecoldfusion2018cpe:2.3:a:adobe:coldfusion:2018:update11:*:*:*:*:*:*
adobecoldfusion2018cpe:2.3:a:adobe:coldfusion:2018:update12:*:*:*:*:*:*
adobecoldfusion2018cpe:2.3:a:adobe:coldfusion:2018:update13:*:*:*:*:*:*
adobecoldfusion2018cpe:2.3:a:adobe:coldfusion:2018:update14:*:*:*:*:*:*
adobecoldfusion2018cpe:2.3:a:adobe:coldfusion:2018:update15:*:*:*:*:*:*
adobecoldfusion2018cpe:2.3:a:adobe:coldfusion:2018:update16:*:*:*:*:*:*
Rows per page:
1-10 of 251

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "ColdFusion",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2023.0.0.330468",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Related

nvd 1
cvelist 1
prion 1
adobe 1
nessus 1
nvd
nvd
CVE-2023-29301
2023-07-12 16:15:11
cvelist
cvelist
CVE-2023-29301 Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass
2023-07-12 15:46:07
prion
prion
Security feature bypass
2023-07-12 16:15:00
adobe
adobe
APSB23-40 : Security update available for Adobe ColdFusion
2023-07-11 00:00:00
nessus
nessus
Adobe ColdFusion < 2018.x < 2018u17 / 2021.x < 2021u7 / 2023.x < 2023u1 Multiple Vulnerabilities (APSB23-40)
2023-07-13 00:00:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

50.4%

JSON
Related for CVE-2023-29301
nvd1cvelist1prion1adobe1nessus1