EXPOSURES › CVE-2013-0629
CVE-2013-0629
HIGH ⌖ ON CISA KEV · EXPLOITEDAdobe ColdFusion suffered a directory traversal vulnerability allowing unauthorized access to restricted directories.
The directory traversal flaw in Adobe ColdFusion permitted attackers to access files outside the intended directory, potentially exposing sensitive data or enabling further exploitation. DIB organizations must ensure legacy platforms like ColdFusion are rigorously patched, as its history of critical RCE and deserialization flaws makes it a high-risk target for supply-chain and data-breach attacks.
Shame score — A known directory traversal vulnerability in a legacy platform with a poor security track record, indicating avoidable risk from running unpatched or poorly maintained software.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.
"Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories."
| PRODUCT | STATUS |
|---|---|
| Adobe Acrobat Sign for Government Adobe |
Authorized |
| Adobe Analytics Adobe |
Authorized |
| Adobe Campaign Adobe |
Authorized |
| Adobe Connect Managed Services (ACMS-GC) Adobe |
Authorized |
| Adobe Creative Cloud for Enterprise Adobe |
Authorized |
| Adobe Document Cloud (PDF Services & Adobe Sign) Adobe |
Authorized |
| Adobe Experience Manager Managed Services (AEMMS-GC) Adobe |
Authorized |
| Adobe Learning Manager Adobe |
Authorized |