Adobe ColdFusion Information Exposure Vulnerability Allowing Security Feature Bypass

A vulnerability allowing information exposure has been identified in Adobe ColdFusion versions 2023.12, 2021.18, and 2025.0 and earlier. This vulnerability could lead to a bypass of security features. It allows a low-privileged attacker with local access to access sensitive information that could be used to further compromise the system or circumvent security mechanisms. Exploitation of this vulnerability does not require user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, potentially allowing for further system compromise or security feature bypass.