CVE-2012-5675 : Adobe ColdFusion 9.0 through 9.0.2, and 10, allows local users to bypass intended shared-hosting sandbox permissions via

Adobe ColdFusion 9.0 through 9.0.2, and 10, allows local users to bypass intended shared-hosting sandbox permissions via unspecified vectors.

Published 2012-12-12 11:38:45

Updated 2012-12-12 11:38:45

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2012-5675

Probability of exploitation activity in the next 30 days: 0.05%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 16 % EPSS Score History EPSS FAQ

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.4	MEDIUM	AV:L/AC:M/Au:N/C:P/I:P/A:P	3.4	6.4	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

http://www.adobe.com/support/security/bulletins/apsb12-26.html

Adobe - Security Bulletins: APSB12-26 - Security update: Hotfix available for ColdFusion 10 and earlier
Patch;Vendor Advisory

Adobe » Coldfusion » Version: 9.0
cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*
Matching versions
Adobe » Coldfusion » Version: 9.0.1
cpe:2.3:a:adobe:coldfusion:9.0.1:*:*:*:*:*:*:*
Matching versions
Adobe » Coldfusion » Version: 9.0.2
cpe:2.3:a:adobe:coldfusion:9.0.2:*:*:*:*:*:*:*
Matching versions
Adobe » Coldfusion » Version: 10.0
cpe:2.3:a:adobe:coldfusion:10.0:*:*:*:*:*:*:*
Matching versions