Main
Vulnerability Database
Exploits
ID:775 - Exploit for Authentication bypass in ColdFusion - CVE-2013-0625
ID:775 - Exploit for Authentication bypass in ColdFusion - CVE-2013-0625
Published: March 18, 2020
Vulnerability identifier: #VU4558
Vulnerability risk: Critical
CVE-ID: CVE-2013-0625
CWE-ID: CWE-592
Exploitation vector: Remote access
Vulnerable software:
ColdFusion
ColdFusion
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to bypass authentication and execute arbitrary code on the target system.
The vulnerability exists due to improper authentication, when password is not configured. A remote unauthenticated attacker can bypass authentication process and execute arbitrary code on the target system.
Note: the vulnerability was being actively exploited.
Remediation
Install update from vendor's website.