Junglewise Threat Intelligence

CVE-2013-0629: Adobe ColdFusion Directory Traversal Vulnerability

CVE-2013-0629 · Severity: critical · CVSS 7.5 · Exploited in the wild · Published 2022-03-07

Technologies: Adobe ColdFusion. Vendors: Adobe.

Executive brief

Adobe ColdFusion contains a directory traversal vulnerability when a password is not configured. This flaw allows unauthenticated remote attackers to access restricted directories via unspecified vectors.

Affected products

  • Adobe ColdFusion 9.0, 9.0.1, 9.0.2, 10

Timeline

  • 2013-01-08: disclosed: NVD Published Date
  • 2013-01-09: exploited: Exploited in the wild in January 2013
  • 2022-03-07: kev added: Added to CISA Known Exploited Vulnerabilities Catalog

Related threats