Main
Vulnerability Database
Exploits
ID:1778 - Exploit for Authentication bypass in ColdFusion - CVE-2013-0632
ID:1778 - Exploit for Authentication bypass in ColdFusion - CVE-2013-0632
Published: March 18, 2020
Vulnerability identifier: #VU4563
Vulnerability risk: Critical
CVE-ID: CVE-2013-0632
CWE-ID: CWE-592
Exploitation vector: Remote access
Vulnerable software:
ColdFusion
ColdFusion
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to bypass authentication and gain unauthorized access to vulnerable system.
The vulnerability exists due to an error within administrator.cfc. A remote unauthenticated attacker can access Adobe ColdFusion application using a default empty password, login to the RDS component and leverage this session to access administrative web interface.
Successful exploitation of this vulnerability results in unauthorized access to Adobe ColdFusion.
Note: the vulnerability was being actively exploited.Remediation
Install update from vendor's website.