CVE-2013-0625

Опубликовано: 09 янв. 2013

Источник: nvd

CVSS3: 9.8

CVSS2: 6.8

EPSS Высокий

Описание

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, as exploited in the wild in January 2013.

Ссылки

http://www.adobe.com/support/security/advisories/apsa13-01.html
Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb13-03.html
Not Applicable
http://www.securityfocus.com/bid/57164
Broken Link
Third Party Advisory
VDB Entry
http://www.adobe.com/support/security/advisories/apsa13-01.html
Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb13-03.html
Not Applicable
http://www.securityfocus.com/bid/57164
Broken Link
Third Party Advisory
VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0625

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:coldfusion:9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:coldfusion:9.0.2:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.8656

Высокий

9.8 Critical

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-mhww-rmfc-8prf