Adobe.ColdFusion.Multiple.Vulnerabilities

Description

This indicates an attempt to exploit one of multiple vulnerabilities in Adobe ColdFusion.
This is due to insufficient sanitizing of user supplied inputs in the application, resulting in either a Directory Traversal, Authentication Bypass, or Information Disclosure vulnerability. A remote attacker can exploit this to gain unauthorized access to sensitive information and execute arbitrary code.

Affected Products

ColdFusion 10, 9.0.2, 9.0.1, 9.0

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
http://www.adobe.com/support/security/bulletins/apsb13-03.html

References