CVE-2013-0631 : Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as expl

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.

Published 2013-01-09 01:55:04

Updated 2013-01-18 04:50:12

Source Adobe Systems Incorporated

View at NVD, CVE.org

Vulnerability category: Information leak

CVE-2013-0631 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Adobe ColdFusion Information Disclosure Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.

Added on 2022-03-07 Action due date 2022-09-07

Exploit prediction scoring system (EPSS) score for CVE-2013-0631

Probability of exploitation activity in the next 30 days: 96.63%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 100 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2013-0631

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

CWE ids for CVE-2013-0631

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2013-0631

http://www.adobe.com/support/security/bulletins/apsb13-03.html

APSB13-03

CVEs referencing this url
http://www.adobe.com/support/security/advisories/apsa13-01.html

Adobe - Security Advisories: APSA13-01 - Security Advisory for ColdFusion
Vendor Advisory

CVEs referencing this url

Products affected by CVE-2013-0631