Update: ColdFusion Sandbox Security on Windows

Allaire reports that when ColdFusion Advanced Security Sandbox is configured, processes created with do not inherit the Sandbox security context. Instead executes with the security context of the ColdFusion Service. This is the "System" account by default.

"Web Hosting providers, particularly, are advised to disable the tag if they rely on Sandbox Security to restrict users' access based on Windows NT Domain accounts."

Affected Software Versions:

ColdFusion 4.5 Enterprise Edition on Windows, ColdFusion 5 Enterprise Edition on Windows Read about it at http://www.allaire.com/Handlers/index.cfm?ID=22237

More about: Allaire, Sandbox Security

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the Computerworld comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Whitepapers
Latest Stories
Community Comments
Whitepapers
All whitepapers
Sign up now to get free exclusive access to reports, research and invitation only events.
Featured Download
/downloads/product/149/dropbox/

Dropbox

Dropbox is a sharing tool that allows you to synchronize your documents, as well share files with others. It automatically uploads the files to the ...

Computerworld newsletter

Join the most dedicated community for IT managers, leaders and professionals in Australia