2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2020-9673" ,
"sourceIdentifier" : "psirt@adobe.com" ,
"published" : "2020-07-17T00:15:11.993" ,
"lastModified" : "2020-09-04T14:22:04.897" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation."
} ,
{
"lang" : "es" ,
"value" : "Adobe ColdFusion 2016 update 15 y versiones anteriores, y ColdFusion 2018 update 9 y versiones anteriores, presentan una vulnerabilidad de secuestro de orden de b\u00fasqueda de dll. Una explotaci\u00f3n con \u00e9xito podr\u00eda conllevar a una escalada de privilegios"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.8 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 5.9
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P" ,
"accessVector" : "LOCAL" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
"availabilityImpact" : "PARTIAL" ,
"baseScore" : 4.4
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 3.4 ,
"impactScore" : 6.4 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : true
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-426"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*" ,
"matchCriteriaId" : "9F3D7C8E-6695-44DF-AC9A-1AE09C46C529"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update10:*:*:*:*:*:*" ,
"matchCriteriaId" : "449A07A6-1D7A-49CF-9316-5EAAFAF38956"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update11:*:*:*:*:*:*" ,
"matchCriteriaId" : "C5265059-D9DD-44E6-B68C-81838BCA64C5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update12:*:*:*:*:*:*" ,
"matchCriteriaId" : "A2277A67-562B-4185-AE5F-EB93563F16DF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update13:*:*:*:*:*:*" ,
"matchCriteriaId" : "6C6E6735-A72F-4CC7-8239-CC96DEF4E5CA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update14:*:*:*:*:*:*" ,
"matchCriteriaId" : "3BCED4DC-29A3-4EBB-9ADF-2C56075D7CA9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update15:*:*:*:*:*:*" ,
"matchCriteriaId" : "1798CDA5-D0A5-4C92-AB36-1EA401BAA27D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*" ,
"matchCriteriaId" : "12BAE66C-A745-4661-B5BB-7FC2C169CC82"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*" ,
"matchCriteriaId" : "E6EC92F3-1EF8-4820-9CD8-ECEA03D27A7B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*" ,
"matchCriteriaId" : "D7446D70-D616-4EC1-BC64-41CDE56EFEAE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update5:*:*:*:*:*:*" ,
"matchCriteriaId" : "59453B01-EAAF-4291-B2C2-98835F5AFE80"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update6:*:*:*:*:*:*" ,
"matchCriteriaId" : "63076ED8-FC30-40B1-99A7-D0069423A536"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update7:*:*:*:*:*:*" ,
"matchCriteriaId" : "E4B4228E-6FBD-492A-8F93-30B1D6861C81"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update8:*:*:*:*:*:*" ,
"matchCriteriaId" : "7D4F5639-F628-4163-BFBA-25B4E7B2DFDE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update9:*:*:*:*:*:*" ,
"matchCriteriaId" : "5BC3FFF1-A25A-4C15-9162-1DA58350DAFE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "3B54B2B0-B1E1-4B4E-A529-D0BD3B5DEEF3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*" ,
"matchCriteriaId" : "EDB126BF-E09D-4E58-A39F-1190407D1CAB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:*" ,
"matchCriteriaId" : "59649177-81EE-43C3-BFA5-E56E65B486DF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:*" ,
"matchCriteriaId" : "453B96ED-738A-4642-B461-C5216CF45CA3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*" ,
"matchCriteriaId" : "58D32489-627B-4E49-9329-8A3B8F8E4903"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:*" ,
"matchCriteriaId" : "6D5860E1-D293-48FE-9796-058B78B2D571"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:*" ,
"matchCriteriaId" : "9F9336CC-E38F-4BCB-83CD-805EC7FEF806"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:*" ,
"matchCriteriaId" : "97964507-047A-4CC8-8D2B-0EA0C7F9BD50"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update8:*:*:*:*:*:*" ,
"matchCriteriaId" : "82208628-F32A-4380-9B0F-DC8507E7701D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update9:*:*:*:*:*:*" ,
"matchCriteriaId" : "1563CE5E-A4F7-40A4-A050-BB96E332D8DD"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://helpx.adobe.com/security/products/coldfusion/apsb20-43.html" ,
"source" : "psirt@adobe.com" ,
"tags" : [
"Vendor Advisory"
]
}
]
}
