CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2013-06317.5/HIGHEPSS 66.4%CISA KEV

2013-01-09

Adobe ColdFusion Information Disclosure Vulnerability (CVE-2013-0631) Security Advisory

[Affected Scope] Adobe ColdFusion versions 9.0, 9.0.1, and 9.0.2

[Impact] Unauthenticated remote attackers can obtain sensitive system configuration files and session tokens, potentially leading to full administrative compromise

[Mitigation] Apply the official APSB13-03 security patch immediately and restrict external access to the /CFIDE directory

coldfusion information-disclosure cve-2013-0631 kev

Full Advisory & Mitigation