Main
Vulnerability Database
Exploits
ID:776 - Exploit for Authentication bypass in ColdFusion - CVE-2013-0629
ID:776 - Exploit for Authentication bypass in ColdFusion - CVE-2013-0629
Published: March 18, 2020
Vulnerability identifier: #VU4559
Vulnerability risk: Medium
CVE-ID: CVE-2013-0629
CWE-ID: CWE-287
Exploitation vector: Remote access
Vulnerable software:
ColdFusion
ColdFusion
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to bypass authentication.
The vulnerability exists due to an error in authentication process, when a password is not configured. A remote unauthenticated attacker can gain unauthorized access to restricted directories.
Successful exploitation of this vulnerability results in unauthorized gaining access to the directories.
Note: the vulnerability was being actively exploited.Remediation
Install update from vendor's website.