CVE-2019-8074

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2018 update 4 and earlier ColdFusion versions 2016 update 11 and earlier

Description The issue is related to path traversal errors in the ColdFusion platform, allowing a remote attacker to write arbitrary files to the device's file system. Successful exploitation could lead to access control bypass in the context of the current user.

Recommendations For ColdFusion versions 2018 update 4 and earlier, update to a version later than update 4 to resolve the issue. For ColdFusion versions 2016 update 11 and earlier, update to a version later than update 11 to resolve the issue. As a temporary workaround, consider restricting access to sensitive directories and files to minimize the risk of exploitation.