Security Advisory
CVE-2006-3979
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the ColdFusion Administrator.