Skip to content
COOEY

EXPOSURES › CVE-2013-0629

CVE-2013-0629

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-03-07 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2013-0629 ↗
⌖ EXPLOITED IN THE WILD SHAME 65/100 exploited-in-wildunpatcheddata-breach

Adobe ColdFusion suffered a directory traversal vulnerability allowing unauthorized access to restricted directories.

The directory traversal flaw in Adobe ColdFusion permitted attackers to access files outside the intended directory, potentially exposing sensitive data or enabling further exploitation. DIB organizations must ensure legacy platforms like ColdFusion are rigorously patched, as its history of critical RCE and deserialization flaws makes it a high-risk target for supply-chain and data-breach attacks.

Shame score — A known directory traversal vulnerability in a legacy platform with a poor security track record, indicating avoidable risk from running unpatched or poorly maintained software.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.60
Adobe faced criticism for a directory traversal flaw in ColdFusion that allowed unauthorized access to restricted directories, though the provided source is a neutral NVD entry without commentary on A
cooey ↗ severe-fallout +0.00
neutral
"Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories."
AFFECTED FEDRAMP PRODUCTS · 8
PRODUCTSTATUS
Adobe Acrobat Sign for Government
Adobe
Authorized
Adobe Analytics
Adobe
Authorized
Adobe Campaign
Adobe
Authorized
Adobe Connect Managed Services (ACMS-GC)
Adobe
Authorized
Adobe Creative Cloud for Enterprise
Adobe
Authorized
Adobe Document Cloud (PDF Services & Adobe Sign)
Adobe
Authorized
Adobe Experience Manager Managed Services (AEMMS-GC)
Adobe
Authorized
Adobe Learning Manager
Adobe
Authorized