Authentication bypass in ColdFusion - CVE-2013-0632
Published: January 13, 2017 / Updated: March 8, 2022
Vulnerability identifier: #VU4563
CSH Severity: Critical
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2013-0632
CWE-ID: CWE-592
Exploitation vector: Remote access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a remote attacker to bypass authentication and gain unauthorized access to vulnerable system.
The vulnerability exists due to an error within administrator.cfc. A remote unauthenticated attacker can access Adobe ColdFusion application using a default empty password, login to the RDS component and leverage this session to access administrative web interface.
Successful exploitation of this vulnerability results in unauthorized access to Adobe ColdFusion.
Note: the vulnerability was being actively exploited.Affected software
ColdFusion
How to mitigate CVE-2013-0632
Install update from vendor's website.
Links to Public Exploits and PoC-codes
- Exploit #777 - Adobe ColdFusion 9 - Administrative Login Bypass (March 18, 2020)
- Exploit #778 - Adobe ColdFusion 9 - Administrative Login Bypass (Metasploit) (March 18, 2020)
- Exploit #779 - Adobe ColdFusion APSB13-03 - Remote Exploit (Metasploit) (March 18, 2020)
- Exploit #1503 - Adobe ColdFusion RDS Authentication Bypass (March 18, 2020)
- Exploit #1778 - Adobe ColdFusion 9 Administrative Login Bypass (March 18, 2020)