Adobe ColdFusion, JRun updated for critical issuesAdobe on Monday issued an advisory for seven critical vulnerabilities in its web design and development platforms, ColdFusion and JRun.The vulnerabilities, which affect ColdFusion versions 8.0.1 and earlier, and JRun 4.0, could result in user accounts or an affected system being compromised.“Adobe is not currently aware of any exploits in the wild for the security vulnerabilities fixed in this release,” according to according to prep. 1. As stated or indicated by; on the authority of: according to historians. 2. In keeping with: according to instructions. 3. an Adobe Product Security Incident Response Team blog blog, short for web log, an online, regularly updated journal or newsletter that is readily accessible to the general public by virtue of being posted on a website. post. Several cross-site scripting See XSS. bugs in ColdFusion could potentially lead to code execution. Other bugs in ColdFusion addressed in the update could lead to information disclosure or privilege escalation Privilege escalation is the act of exploiting a bug in an application to gain access to resources which normally would have been protected from an application or user. The result is that the application performs actions with a higher security context than intended by the , Adobe said in its security bulletin. In addition, issues with the management console A terminal or workstation used to monitor and control a network. See Microsoft Management Console. for JRun could potentially lead to information disclosure or code execution. In July, Adobe fixed a zero-day vulnerability in ColdFusion, which was being used to compromise ColdFusion websites. 
|
|
||||||||||||||
Printer friendly
Cite/link
Email
Feedback
Reader Opinion