PT-2013-2484 · Adobe · Coldfusion

Published 2013-01-09 · Updated 2025-02-13 · CVE-2013-0631

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 9.0 through 9.0.2

Description The issue allows attackers to obtain sensitive information via unspecified vectors. It has been exploited in the wild, with incidents reported in January 2013.

Recommendations For Adobe ColdFusion versions 9.0 through 9.0.2, update to a version that contains a fix for this issue to prevent information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2013-0631

Affected Products

Coldfusion

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2013-0631 · Security Note
• http://adobe.com/support/security/advisories/apsa13-01.html · Vendor Advisory
• https://t.me/cvenotify/110030 · Telegram Post
• https://t.me/cvenotify/111252 · Telegram Post
• https://t.me/cvenotify/105099 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0631 · Note
• http://adobe.com/support/security/bulletins/apsb13-03.html · Note