| Package | Affected versions | Patched versions |
|---|---|---|
| coldfusion | = 2016= 2018= 2021 |
The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, such as C:\ColdFusion2021\. By default, unprivileged users can create files in this directory structure, which creates a privilege-escalation vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free