CVE-2009-3960

LiveCycle 8.0.1, 8.2.1 va 9.0, LiveCycle Data Services 2.5.1, 2.6.1 va 3.0, Flex Data Services 2.0.1 va ColdFusion 7.8.0., ColdFusion 7.8.0.da ishlatilgan BlazeDS 3.2 va undan oldingi versiyalarida aniqlanmagan zaiflik. 9.0, masofaviy tajovuzkorlarga so'rov bilan bog'langan va XML hujjatlaridagi kiritilgan teglar va tashqi ob'ekt havolalari bilan bog'liq vektorlar orqali nozik ma'lumotlarni olish imkonini beradi.

CVSS Vector

Manbalar

• http://secunia.com/advisories/38543
• http://securitytracker.com/id?1023584
• http://www.adobe.com/support/security/bulletins/apsb10-05.html
• http://www.osvdb.org/62292
• http://www.securityfocus.com/bid/38197