Security News > 2021 > March > Adobe Patches Critical ColdFusion Security Flaw
2021-03-22 15:06
Adobe has released an urgent patch for a potentially dangerous security vulnerability in Adobe ColdFusion, the platform used for building and deploying mobile and web apps.
"These updates resolve a critical vulnerability that could lead to arbitrary code execution," Adobe said in an advisory.
The security updates are available for ColdFusion versions 2021, 2016 and 2018.
The company recommends that users update the ColdFusion JDK/JRE to the latest version of the LTS releases for 1.8 and JDK 11.
"Applying the ColdFusion update without a corresponding JDK update will NOT secure the server," Adobe warned.
The company also published security configuration settings and lockdown guides for ColdFusion deployments.
News URL
Related news
- Two Actively Exploited Security Flaws in Adobe and Oracle Products Flagged by CISA (source)
- 89% of Enterprise GenAI Usage Is Invisible to Organizations Exposing Critical Security Risks, New Report Reveals (source)
- Stealthy Apache Tomcat Critical Exploit Bypasses Security Filters: Are You at Risk? (source)
- Still Using an Older Version of iOS or iPadOS? Update Now to Patch These Critical Security Vulnerabilities (source)
- Adobe Patches 11 Critical ColdFusion Flaws Amid 30 Total Vulnerabilities Discovered (source)