CVEvulnerability
CVE-2004-2204
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject function or CFOBJECT tag enabled, allows local users to conduct unauthorized activities and obtain administrative passwords by creating CFML scripts that use CreateObject or CFOBJECT.
Affected configurations
• macromedia coldfusion 6.0
• macromedia coldfusion 6.1
Related
Referenced by CWE · observed example (1)
- CWE-267 Privilege Defined With Unsafe Actions weakness
References
- http://secunia.com/advisories/12693 Vendor Advisory
- http://www.macromedia.com/devnet/security/security_zone/mpsb04-10.html Vendor Advisory
- http://www.osvdb.org/10718 www.osvdb.org
- http://www.securityfocus.com/archive/1/377213 www.securityfocus.com
- http://www.securityfocus.com/bid/11364 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17567 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/12693 Vendor Advisory
- http://www.macromedia.com/devnet/security/security_zone/mpsb04-10.html Vendor Advisory
- http://www.osvdb.org/10718 www.osvdb.org
- http://www.securityfocus.com/archive/1/377213 www.securityfocus.com
- http://www.securityfocus.com/bid/11364 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17567 exchange.xforce.ibmcloud.com