Signature Detail
Short Name |
HTTP:COLDFUSION:CFIDE-AUTHBYPAS |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Adobe ColdFusion CFIDE Authentication Bypass |
Release Date |
2013/04/22 |
Update Number |
2256 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Adobe ColdFusion CFIDE Authentication Bypass
This signature detects attempts to exploit a known vulnerability in Adobe ColdFusion. A successful attack can lead to authentication bypass and information disclosure.
Extended Description
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.
Affected Products
- adobe coldfusion 9.0
- adobe coldfusion 9.0.1
- adobe coldfusion 9.0.2
References
- BugTraq: 57165
- BugTraq: 57164
- BugTraq: 57330
- CVE: CVE-2013-0625
- CVE: CVE-2013-0631
- CVE: CVE-2013-0632
- CVE: CVE-2013-0629