CVE-2013-3336: Medium severity Adobe ColdFusion vulnerability
Published May 9, 2013
·Updated
Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files via unknown vectors.
Affected Software
4 affected components
Adobe ColdFusion=9.0
Adobe ColdFusion=9.0.1
Adobe ColdFusion=9.0.2
Adobe ColdFusion=10.0
Event History
May 9, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3336?
CVE-2013-3336 is rated as a critical vulnerability due to its potential to allow remote attackers to read arbitrary files.
2
How do I fix CVE-2013-3336?
To mitigate CVE-2013-3336, upgrade Adobe ColdFusion to the latest version that is not affected by this vulnerability.
3
What versions of Adobe ColdFusion are affected by CVE-2013-3336?
CVE-2013-3336 affects Adobe ColdFusion versions 9.0, 9.0.1, 9.0.2, and 10.0.
4
What types of attacks are possible with CVE-2013-3336?
CVE-2013-3336 allows remote attackers to read sensitive files on the server, which could lead to data exposure.
5
Is there a workaround for CVE-2013-3336?
While upgrading is the best solution for CVE-2013-3336, consider restricting access to the ColdFusion server as a temporary workaround.