Security News > 2021 > March > Adobe Patches Critical ColdFusion Security Flaw
2021-03-22 15:06
Adobe has released an urgent patch for a potentially dangerous security vulnerability in Adobe ColdFusion, the platform used for building and deploying mobile and web apps.
"These updates resolve a critical vulnerability that could lead to arbitrary code execution," Adobe said in an advisory.
The security updates are available for ColdFusion versions 2021, 2016 and 2018.
The company recommends that users update the ColdFusion JDK/JRE to the latest version of the LTS releases for 1.8 and JDK 11.
"Applying the ColdFusion update without a corresponding JDK update will NOT secure the server," Adobe warned.
The company also published security configuration settings and lockdown guides for ColdFusion deployments.
News URL
Related news
- Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing (source)
- CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patches (source)
- HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities (source)
- Major security audit of critical FreeBSD components now available (source)