CVE-2013-0632
CRITICAL KEVAdobe ColdFusion 9.0-9.0.2, 10 - Unauthenticated Authentication Bypass and Remote Code Execution via RDS Component
Title source: llmExploitation Summary
CVE-2013-0632 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 3, 2022.
EIP tracks 4 public exploits from researchers including Metasploit, Scott Buckel, including a Metasploit module exploits/multi/http/coldfusion_rds_auth_bypass.
AI-analyzed exploit summary This Metasploit module exploits an authentication bypass in Adobe ColdFusion 9 via the RDS component, allowing arbitrary code execution by uploading and executing a CFML payload. It leverages misconfigured or empty RDS passwords to gain administrative access.
Description
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web interface, as exploited in the wild in January 2013.
Exploits (4)
This Metasploit module exploits an authentication bypass in Adobe ColdFusion 9 via the RDS component, allowing arbitrary code execution by uploading and executing a CFML payload. It leverages misconfigured or empty RDS passwords to gain administrative access.
This Metasploit module exploits multiple vulnerabilities in Adobe ColdFusion (APSB13-03), including authentication bypass (CVE-2013-0632), directory traversal (CVE-2013-0629), and arbitrary command execution (CVE-2013-0625). It leverages scheduled tasks to drop and execute payloads.
This exploit bypasses the Adobe ColdFusion 9 administrator login by manipulating the 'rdsPasswordAllowed' parameter, allowing unauthorized access when RDS is disabled. The PoC provides a simple HTML form to trigger the vulnerability.
This Metasploit module exploits an authentication bypass in Adobe ColdFusion's RDS component (CVE-2013-0632) by leveraging empty password configurations to gain admin access and execute arbitrary code via a CFML payload dropper.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H