CVE-2008-1203

CVE-2008-1203 describes a vulnerability in the administrator interface of Adobe ColdFusion 8 and ColdFusion MX7, where failed authentication attempts are not logged. This oversight significantly eases brute-force attacks by remote attackers, allowing them to guess credentials without detection. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low complexity, and potential for full compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been identified, the lack of logging still presents a notable security risk.