Unauthenticated Access to Restricted Directories in Adobe ColdFusion (CVE-2013-0629)

CVE-2013-0629 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:N/A:N

Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013.

Learn more about our Web Application Penetration Testing UK.