MALWARELIST.net – Your Information Security Source

Vulnerabilities in Adobe ColdFusion

Vulnerabilities: Security Bypass, spoofing attack in Adobe ColdFusion

Danger: Average
The presence of fixes: Yes
The number of vulnerabilities: 2

CVE ID: CVE-2013-1387
CVE-2013-1388
Vector of operation: Remote
Impact: Security Bypass, spoofing attack

Affected Products: Adobe ColdFusion 10.с, Adobe ColdFusion 9.x

Affected versions:

– Adobe ColdFusion 10, possibly other versions;
– Adobe ColdFusion 9.0.2, possibly other versions;
– Adobe ColdFusion 9.0.1, possibly other versions;
– Adobe ColdFusion 9.0, possibly other versions.

Description:

Which can be exploited by malicious people to bypass certain security restrictions.

1. The vulnerability is caused due to an unspecified error. A remote user can spoof the authenticated user.

2. The vulnerability is caused due to an unspecified error. A remote user can access the administrative console, ColdFusion.

Manufacturer URL: http://www.adobe.com/products/coldfusion-family.html

Solution: Install the update from the manufacturer’s website.

Links:

http://www.adobe.com/support/security/bulletins/apsb13-10.html