Security Advisory

CVE-2020-10145

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-05-27 20:55:10

Last updated 2024-08-04 10:50:57

Assigner certcc

CVSS score 7.8

State PUBLISHED

Description

The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, such as C:\ColdFusion2021\. By default, unprivileged users can create files in this directory structure, which creates a privilege-escalation vulnerability.

← Browse all CVEs View on cve.org ↗