Why hasnt Macromedia released more information about the nature of the security issues?
Our objective is to give customers the ability to build secure sites. The two security issues detailed in MPSB01-07 were discovered through a routine internal security audit. The Bulletin explains the potential impact of the problem, but does not provide detailed instructions to exploit the vulnerability. We made the decision to release the information in this way because there is no known workaround to these issues using ColdFusion without the patch. The patch addresses these issues.
