E18-mbpx1
CVSS:
9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
False Positive:
f
Variants:
1
Year:
2018
Description
This strike exploits a remote code execution vulnerability present in Adobe ColdFusion platform.
The flaw is due to an insecure deserialization in the Remote Method Invocation (RMI) server which contains a vulnerable version of Apache Commons BeanUtils.
By exploiting an unpatched version of the application, an attacker is thus able to remotely execute arbitrary code with the privileges of the user that is running the service.
