Summary
This host is running Adobe ColdFusion and is prone to multiple vulnerabilities
Impact
Successful exploitation will allow attackers to disclose certain sensitive information and bypass certain security restrictions.
Impact Level: Application
Solution
Upgrade to Adobe ColdFusion 10 Update 9 or later,
https://www.adobe.com/cfusion/tdrc/index.cfm?product=coldfusion
Insight
Multiple flaws are due to,
- An unspecified error can be exploited to disclose certain data in certain multi-threaded use cases.
- An unspecified error can be exploited to gain access to the ColdFusion administrator console.
Affected
Adobe ColdFusion 10 before Update 9
Detection
Get the installed version of Adobe ColdFusion with the help of detect NVT and check the version is vulnerable or not.
References
Severity
Classification
-
CVE CVE-2013-1387, CVE-2013-1388 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities