CVE-2013-0629

Опубликовано: 09 янв. 2013

Источник: nvd

CVSS3: 7.5

CVSS2: 4.3

EPSS Высокий

Описание

Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013.

Ссылки

http://www.adobe.com/support/security/advisories/apsa13-01.html
Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb13-03.html
Not Applicable
http://www.securityfocus.com/bid/57165
Broken Link
Third Party Advisory
VDB Entry
http://www.adobe.com/support/security/advisories/apsa13-01.html
Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb13-03.html
Not Applicable
http://www.securityfocus.com/bid/57165
Broken Link
Third Party Advisory
VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0629

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:coldfusion:9.0.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:coldfusion:9.0.2:*:*:*:*:*:*:*

cpe:2.3:a:adobe:coldfusion:10.0:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.80909

Высокий

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-36vv-8mxf-q4m6