The version of Adobe ColdFusion running on the remote host is missing hotfixes that address the following vulnerabilities :

  - An authentication bypass vulnerability exists that could allow an unauthorized user to gain administrative access. (CVE-2013-0625)

  - A directory traversal vulnerability exists that could allow an unauthorized user to gain administrative access. (CVE-2013-0629)

  - An unspecified information disclosure vulnerability exists that affects servers that have already been compromised. (CVE-2013-0631)

  - Authentication bypass vulnerability exists that could allow an unauthorized user to gain administrative access. (CVE-2013-0632)

検出

Adobe ColdFusion Multiple Vulnerabilities (APSB13-03) (credentialed check)

critical Nessus プラグイン ID 66526

バージョン 1.14