On Nov. 14, 2023, Adobe released security updates addressing vulnerabilities affecting unpatched ColdFusion software. Exploitation of some of these vulnerabilities may allow a malicious cyber actor to take control of an affected system.
CISA urges organizations to review Adobe ColdFusion security bulletin APSB23-52 for more information and to:
- Apply the recommended updates in APSB23-52.
- Follow Adobe recommendations on ColdFusion hardening.
- Consider adding a web application firewall (WAF) filter for
CFIDEfor external users. - Consider using CISA’s Cybersecurity Incident and Vulnerability Response Playbooks for other actionable steps.
https://www.cisa.gov/news-events/alerts/2023/11/22/adobe-releases-security-updates-coldfusion
On Nov. 14, 2023, Adobe released security updates addressing vulnerabilities affecting unpatched ColdFusion software. Exploitation of some of these vulnerabilities may allow a malicious cyber actor to take control of an affected system.
CISA urges organizations to review Adobe ColdFusion security bulletin APSB23-52 for more information and to:
- Apply the recommended updates in APSB23-52.
- Follow Adobe recommendations on ColdFusion hardening.
- Consider adding a web application firewall (WAF) filter for
CFIDEfor external users. - Consider using CISA’s Cybersecurity Incident and Vulnerability Response Playbooks for other actionable steps.
Source: CISA Current Activity
Source Link: https://www.cisa.gov/news-events/alerts/2023/11/22/adobe-releases-security-updates-coldfusion
