The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote attackers to conduct brute force attacks without detection.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2008-03-11 17:44
Updated : 2017-08-07 18:29
NVD link : CVE-2008-1203
Mitre link : CVE-2008-1203
JSON object : View
CWE
Products Affected
adobe
- coldfusion