CVE-2018-15963 - Vulnerability Details

Vendors	Products
Adobe	Coldfusion

Link	Providers
http://www.securityfocus.com/bid/105310
http://www.securitytracker.com/id/1041621
https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "ColdFusion", "vendor": "Adobe", "versions": [{"status": "affected", "version": "July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier versions"}]}], "datePublic": "2018-09-11T00:00:00", "descriptions": [{"lang": "en", "value": "Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary folder creation."}], "problemTypes": [{"descriptions": [{"description": "Security bypass", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-09-26T09:57:01", "orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html"}, {"name": "105310", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/105310"}, {"name": "1041621", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1041621"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@adobe.com", "ID": "CVE-2018-15963", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "ColdFusion", "version": {"version_data": [{"version_value": "July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier versions"}]}}]}, "vendor_name": "Adobe"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary folder creation."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Security bypass"}]}]}, "references": {"reference_data": [{"name": "https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html", "refsource": "CONFIRM", "url": "https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html"}, {"name": "105310", "refsource": "BID", "url": "http://www.securityfocus.com/bid/105310"}, {"name": "1041621", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1041621"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T10:10:05.636Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html"}, {"name": "105310", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/105310"}, {"name": "1041621", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1041621"}]}]}, "cveMetadata": {"assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "assignerShortName": "adobe", "cveId": "CVE-2018-15963", "datePublished": "2018-09-25T13:00:00", "dateReserved": "2018-08-28T00:00:00", "dateUpdated": "2024-08-05T10:10:05.636Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : ColdFusion (string)

vendor : Adobe (string)

versions : [ »

0 : { »

status : affected (string)

version : July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier versions (string)

}

]

}

]

datePublic : 2018-09-11T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary folder creation. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Security bypass (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2018-09-26T09:57:01 (string)

orgId : 078d4453-3bcd-4900-85e6-15281da43538 (string)

shortName : adobe (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html (string)

}

1 : { »

name : 105310 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/105310 (string)

}

2 : { »

name : 1041621 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

]

url : http://www.securitytracker.com/id/1041621 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@adobe.com (string)

ID : CVE-2018-15963 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : ColdFusion (string)

version : { »

version_data : [ »

0 : { »

version_value : July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier versions (string)

}

]

}

]

}

vendor_name : Adobe (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary folder creation. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Security bypass (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html (string)

refsource : CONFIRM (string)

url : https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html (string)

}

1 : { »

name : 105310 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/105310 (string)

}

2 : { »

name : 1041621 (string)

refsource : SECTRACK (string)

url : http://www.securitytracker.com/id/1041621 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T10:10:05.636Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html (string)

}

1 : { »

name : 105310 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/105310 (string)

}

2 : { »

name : 1041621 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

2 : x_transferred (string)

]

url : http://www.securitytracker.com/id/1041621 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 078d4453-3bcd-4900-85e6-15281da43538 (string)

assignerShortName : adobe (string)

cveId : CVE-2018-15963 (string)

datePublished : 2018-09-25T13:00:00 (string)

dateReserved : 2018-08-28T00:00:00 (string)

dateUpdated : 2024-08-05T10:10:05.636Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:*", "matchCriteriaId": "E217CE63-07DC-4A88-8877-181F33A21C20", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:*", "matchCriteriaId": "7D4BD25E-6856-40EC-98A8-ACB540992487", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update10:*:*:*:*:*:*", "matchCriteriaId": "2F0907E8-7BC4-4F5A-894C-B7C5F6BAAEAE", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update11:*:*:*:*:*:*", "matchCriteriaId": "AFE18FEA-271A-42FE-8C24-19731DEB5444", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update12:*:*:*:*:*:*", "matchCriteriaId": "15F7DCF1-D9F2-45C0-B089-E37C91579729", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update13:*:*:*:*:*:*", "matchCriteriaId": "CB398297-DA76-4A56-858B-FC69FF220DAF", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update14:*:*:*:*:*:*", "matchCriteriaId": "CBC72CEF-D09E-4AD8-98CD-1EE0B5CB62A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:*", "matchCriteriaId": "82F81CF8-1482-4731-AD34-677B8D6B930B", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:*", "matchCriteriaId": "57BBBE71-BBE0-4129-B997-3F9AF54BFBD8", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:*", "matchCriteriaId": "8E514D95-9287-4A43-9A44-BD6F8EDC5DA8", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:*", "matchCriteriaId": "96C50CD1-CE75-4D70-AD65-2DB6027D806A", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:*", "matchCriteriaId": "AE1B1190-4699-4FB0-AD46-DF0233B5BA90", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:*", "matchCriteriaId": "827CB550-5078-4FD5-8B1F-616C06912AD9", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update8:*:*:*:*:*:*", "matchCriteriaId": "31F22450-F26C-4797-9292-66CA444C0D2C", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:11.0:update9:*:*:*:*:*:*", "matchCriteriaId": "72450205-B4F4-4B44-9991-F4876D829BBD", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*", "matchCriteriaId": "B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*", "matchCriteriaId": "9F3D7C8E-6695-44DF-AC9A-1AE09C46C529", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*", "matchCriteriaId": "12BAE66C-A745-4661-B5BB-7FC2C169CC82", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*", "matchCriteriaId": "E6EC92F3-1EF8-4820-9CD8-ECEA03D27A7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*", "matchCriteriaId": "D7446D70-D616-4EC1-BC64-41CDE56EFEAE", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2016:update5:*:*:*:*:*:*", "matchCriteriaId": "59453B01-EAAF-4291-B2C2-98835F5AFE80", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2016:update6:*:*:*:*:*:*", "matchCriteriaId": "63076ED8-FC30-40B1-99A7-D0069423A536", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*", "matchCriteriaId": "3B54B2B0-B1E1-4B4E-A529-D0BD3B5DEEF3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary folder creation."}, {"lang": "es", "value": "Adobe ColdFusion en versiones 12 de julio (2018.0.0.310739), Update 6 y anteriores, y Update 14 y anteriores, tiene una vulnerabilidad de omisi\u00f3n de seguridad. Su explotaci\u00f3n con \u00e9xito podr\u00eda permitir la creaci\u00f3n de carpetas arbitrarias."}], "id": "CVE-2018-15963", "lastModified": "2024-11-21T03:51:48.943", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-09-25T13:29:01.817", "references": [{"source": "psirt@adobe.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/105310"}, {"source": "psirt@adobe.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1041621"}, {"source": "psirt@adobe.com", "tags": ["Vendor Advisory"], "url": "https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/105310"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1041621"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html"}], "sourceIdentifier": "psirt@adobe.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:* (string)

matchCriteriaId : E217CE63-07DC-4A88-8877-181F33A21C20 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:* (string)

matchCriteriaId : 7D4BD25E-6856-40EC-98A8-ACB540992487 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update10:*:*:*:*:*:* (string)

matchCriteriaId : 2F0907E8-7BC4-4F5A-894C-B7C5F6BAAEAE (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update11:*:*:*:*:*:* (string)

matchCriteriaId : AFE18FEA-271A-42FE-8C24-19731DEB5444 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update12:*:*:*:*:*:* (string)

matchCriteriaId : 15F7DCF1-D9F2-45C0-B089-E37C91579729 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update13:*:*:*:*:*:* (string)

matchCriteriaId : CB398297-DA76-4A56-858B-FC69FF220DAF (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update14:*:*:*:*:*:* (string)

matchCriteriaId : CBC72CEF-D09E-4AD8-98CD-1EE0B5CB62A2 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:* (string)

matchCriteriaId : 82F81CF8-1482-4731-AD34-677B8D6B930B (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:* (string)

matchCriteriaId : 57BBBE71-BBE0-4129-B997-3F9AF54BFBD8 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:* (string)

matchCriteriaId : 8E514D95-9287-4A43-9A44-BD6F8EDC5DA8 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:* (string)

matchCriteriaId : 96C50CD1-CE75-4D70-AD65-2DB6027D806A (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:* (string)

matchCriteriaId : AE1B1190-4699-4FB0-AD46-DF0233B5BA90 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:* (string)

matchCriteriaId : 827CB550-5078-4FD5-8B1F-616C06912AD9 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update8:*:*:*:*:*:* (string)

matchCriteriaId : 31F22450-F26C-4797-9292-66CA444C0D2C (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:adobe:coldfusion:11.0:update9:*:*:*:*:*:* (string)

matchCriteriaId : 72450205-B4F4-4B44-9991-F4876D829BBD (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:* (string)

matchCriteriaId : B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:* (string)

matchCriteriaId : 9F3D7C8E-6695-44DF-AC9A-1AE09C46C529 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:* (string)

matchCriteriaId : 12BAE66C-A745-4661-B5BB-7FC2C169CC82 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:* (string)

matchCriteriaId : E6EC92F3-1EF8-4820-9CD8-ECEA03D27A7B (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:* (string)

matchCriteriaId : D7446D70-D616-4EC1-BC64-41CDE56EFEAE (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2016:update5:*:*:*:*:*:* (string)

matchCriteriaId : 59453B01-EAAF-4291-B2C2-98835F5AFE80 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2016:update6:*:*:*:*:*:* (string)

matchCriteriaId : 63076ED8-FC30-40B1-99A7-D0069423A536 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:* (string)

matchCriteriaId : 3B54B2B0-B1E1-4B4E-A529-D0BD3B5DEEF3 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary folder creation. (string)

}

1 : { »

lang : es (string)

value : Adobe ColdFusion en versiones 12 de julio (2018.0.0.310739), Update 6 y anteriores, y Update 14 y anteriores, tiene una vulnerabilidad de omisión de seguridad. Su explotación con éxito podría permitir la creación de carpetas arbitrarias. (string)

}

]

id : CVE-2018-15963 (string)

lastModified : 2024-11-21T03:51:48.943 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : true (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

confidentialityImpact : NONE (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:N/C:N/I:P/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 1.4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2018-09-25T13:29:01.817 (string)

references : [ »

0 : { »

source : psirt@adobe.com (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/105310 (string)

}

1 : { »

source : psirt@adobe.com (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securitytracker.com/id/1041621 (string)

}

2 : { »

source : psirt@adobe.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/105310 (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securitytracker.com/id/1041621 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html (string)

}

]

sourceIdentifier : psirt@adobe.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object