Vulnerability in Adobe Coldfusion

CVE-2012-5675

Adobe ColdFusion 9.0 through 9.0.2, and 10, allows local users to bypass intended shared-hosting sandbox permissions via unspecified vectors.

EPSS: 0.007 (50.2th percentile) — read the EPSS interpretation.

Affected products

Adobe Coldfusion — versions 9.0, 9.0.1, 9.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)