Vulnerability in Allaire Coldfusion Server

CVE-2001-1120

Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.

EPSS: 0.019 (77.8th percentile) — read the EPSS interpretation.

Affected products

Allaire Coldfusion_server — versions 2.0, 3.0, 3.0.1
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)