NVD

Id
36934  
Name
CVE-2013-0632  
Description
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web interface, as exploited in the wild in January 2013.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-01-16  
Modified Date
2014-01-17  
Seq
2013-0632  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
188897 36934 CVE-2013-0632 http://www.adobe.com/support/security/advisories/apsa13-01.html  View
188898 36934 CVE-2013-0632 http://www.adobe.com/support/security/bulletins/apsb13-03.html  View
188899 36934 CVE-2013-0632 30210  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19544 JVNDB-2013-001119 Adobe ColdFusion の administrator.cfc における認証を回避される脆弱性 Adobe ColdFusion の administrator.cfc には、認証を回避され、任意のコードを実行される脆弱性が存在します。 CVE-2013-0632 60574 CVE-2013-0632 36934 10 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001119.html 2013-01-04 2015-05-11 View