CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2013-01-17
Adobe ColdFusion RDS Default Password Authentication Bypass and Remote Code Execution (CVE-2013-0632)
[Affected Scope] Adobe ColdFusion versions 9.0, 9.0.1, 9.0.2, and 10
[Impact] Remote attackers can bypass authentication using a default empty password on the RDS component, hijack the session to access the administrator interface, and execute arbitrary code
[Mitigation] Apply the official APSB13-03 security patch, disable the RDS component, or enforce strong passwords