CVE-2004-2331 | BDVDB-2026-11973 Detail

Description#

ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive information by using Java reflection methods to access trusted Java objects without using the CreateObject function or cfobject tag.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.macromedia.com/devnet/security/security_zone/mpsb04-01.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/14984
http://www.securityfocus.com/bid/9521
http://secunia.com/advisories/10743/

Exploit#

No public exploit known

History#

Version 12005-08-16Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.