NVD

Id
36928  
Name
CVE-2013-0625  
Description
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, as exploited in the wild in January 2013.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-01-08  
Modified Date
2013-01-17  
Seq
2013-0625  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
188867 36928 CVE-2013-0625 http://www.adobe.com/support/security/advisories/apsa13-01.html  View
188868 36928 CVE-2013-0625 http://www.adobe.com/support/security/bulletins/apsb13-03.html  View
188869 36928 CVE-2013-0625 57164  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19437 JVNDB-2013-001011 Adobe ColdFusion における認証を回避される脆弱性 Adobe ColdFusion には、パスワードが設定されていない場合、認証を回避される、および任意のコードを実行される脆弱性が存在します。 CVE-2013-0625 60567 CVE-2013-0625 36928 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001011.html 2013-01-04 2015-05-11 View