CVE-2013-0629 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Adobe	Coldfusion	9.0
Apple	Mac Os X	-
Microsoft	Windows	-
Opengroup	Unix	-

References

http://www.adobe.com/support/security/advisories/apsa13-01.htmlVendor Advisory
http://www.adobe.com/support/security/bulletins/apsb13-03.htmlNot Applicable
http://www.securityfocus.com/bid/57165Broken LinkThird Party AdvisoryVDB Entry
http://www.adobe.com/support/security/advisories/apsa13-01.htmlVendor Advisory
http://www.adobe.com/support/security/bulletins/apsb13-03.htmlNot Applicable
http://www.securityfocus.com/bid/57165Broken LinkThird Party AdvisoryVDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-US Government Resource

FAQ

What is CVE-2013-0629?

CVE-2013-0629 is a vulnerability with a CVSS score of 7.5 (HIGH). Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013.

How severe is CVE-2013-0629?

CVE-2013-0629 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-0629?

Check the references section above for vendor advisories and patch information. Affected products include: Adobe Coldfusion, Apple Mac Os X, Microsoft Windows, Opengroup Unix.