Does vulnerability CVE-2013-3336 apply to CF8.0?

Question

The release note was confused.Adobe has identified a critical vulnerability affecting ColdFusion 10, 9.0.2, 9.0.1, 9.0, and earlier versions for Windows, Macintosh, and UNIX. This vulnerability (CVE-2013-3336) could permit an unauthorized user to remotely retrieve files stored on a server.

BKBK · Answer

I think ColdFusion 8 is ignored simply because it is no longer current, and is in fact heading for end-of-life. See Adobe's end-of-life matrix.

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.