CVE-2024-34113

Published Jun 13, 2024

Last updated 3 months ago

CVSS medium 5.5

Overview

Description: ColdFusion versions 2023u7, 2021u13 and earlier are affected by a Weak Cryptography for Passwords vulnerability that could result in a security feature bypass. This vulnerability arises due to the use of insufficiently strong cryptographic algorithms or flawed implementation that compromises the confidentiality of password data. An attacker could exploit this weakness to decrypt or guess passwords, potentially gaining unauthorized access to protected resources. Exploitation of this issue does not require user interaction.
Source: psirt@adobe.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-326
psirt@adobe.com: CWE-261

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2021:update1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AFD05E3A-10F9-4C75-9710-BA46B66FF6E6"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2021:update10:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F1FC7D1D-6DD2-48B2-980F-B001B0F24473"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2021:update11:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1FA19E1D-61C2-4640-AF06-4BCFE750BDF3"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2021:update12:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3F331DEA-F3D0-4B13-AB1E-6FE39B2BB55D"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2021:update13:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "63D5CF84-4B0D-48AE-95D6-262AEA2FFDE8"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2021:update2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D57C8681-AC68-47DF-A61E-B5C4B4A47663"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2021:update3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "75608383-B727-48D6-8FFA-D552A338A562"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2021:update4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7773DB68-414A-4BA9-960F-52471A784379"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2021:update5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B38B9E86-BCD5-4BCA-8FB7-EC55905184E6"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2021:update6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5E7BAB80-8455-4570-A2A2-8F40469EE9CC"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2021:update7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F9D645A2-E02D-4E82-A2BD-0A7DE5B8FBCC"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2021:update8:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6E22D701-B038-4795-AA32-A18BC93C2B6F"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2021:update9:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CAC4A0EC-C3FC-47D8-86CE-0E6A87A7F0B0"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2023:update1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0AA3D302-CFEE-4DFD-AB92-F53C87721BFF"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2023:update2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EB88D4FE-5496-4639-BAF2-9F29F24ABF29"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2023:update3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "43E0ED98-2C1F-40B8-AF60-FEB1D85619C0"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2023:update4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "76204873-C6E0-4202-8A03-0773270F1802"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2023:update5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C1A22BE9-0D47-4BA8-8BDB-9B12D7A0F7C7"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2023:update6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E3A83642-BF14-4C37-BD94-FA76AABE8ADC"
          },
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:2023:update7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A892E1DC-F2C8-4F53-8580-A2D1BEED5A25"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

References