CVE-2008-1656

Adobe ColdFusion 8 and 8.0.1 does not properly implement the public access level for CFC methods, which allows remote attackers to invoke these methods via Flex 2 remoting, a different vulnerability than CVE-2006-4725.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:8.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2008-04-09 19:05

Updated : 2024-02-28 11:21


NVD link : CVE-2008-1656

Mitre link : CVE-2008-1656

CVE.ORG link : CVE-2008-1656


JSON object : View

Products Affected

adobe

  • coldfusion
CWE
CWE-264

Permissions, Privileges, and Access Controls