PT-2013-2479 · Adobe · Coldfusion

Published 2013-01-09 · Updated 2025-02-13 · CVE-2013-0625

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 9.0 through 9.0.2

Description The issue allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors when a password is not configured. This has been exploited in the wild in January 2013.

Recommendations For Adobe ColdFusion versions 9.0 through 9.0.2, configure a password to prevent authentication bypass.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2013-0625

Affected Products

Coldfusion

References · 9

• 🔥 https://exploit-db.com/exploits/24946 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-0625 · Security Note
• http://adobe.com/support/security/advisories/apsa13-01.html · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0625 · Note
• https://t.me/cvenotify/111250 · Telegram Post
• https://t.me/cvenotify/105097 · Telegram Post
• http://adobe.com/support/security/bulletins/apsb13-03.html · Note
• https://t.me/cvenotify/110028 · Telegram Post
• http://securityfocus.com/bid/57164 · Note