EXPOSURES › CVE-2013-0625
CVE-2013-0625
HIGH ⌖ ON CISA KEV · EXPLOITEDAn authentication bypass in Adobe ColdFusion allowed unauthorized administrative access, later linked to CVSS 10.0 command and eval injection flaws.
The authentication bypass in Adobe ColdFusion enabled attackers to gain administrative access without valid credentials, a critical failure for any organization relying on ColdFusion for web applications. DIB organizations must ensure all ColdFusion instances are patched to the latest versions to prevent arbitrary code execution and privilege escalation, as these flaws were actively exploited and added to CISA's KEV catalog.
Shame score — The vulnerability allowed unauthorized administrative access and was later linked to CVSS 10.0 flaws, indicating severe, avoidable negligence in patch management and security design.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.
"Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access."
| PRODUCT | STATUS |
|---|---|
| Adobe Acrobat Sign for Government Adobe |
Authorized |
| Adobe Analytics Adobe |
Authorized |
| Adobe Campaign Adobe |
Authorized |
| Adobe Connect Managed Services (ACMS-GC) Adobe |
Authorized |
| Adobe Creative Cloud for Enterprise Adobe |
Authorized |
| Adobe Document Cloud (PDF Services & Adobe Sign) Adobe |
Authorized |
| Adobe Experience Manager Managed Services (AEMMS-GC) Adobe |
Authorized |
| Adobe Learning Manager Adobe |
Authorized |