Security Advisory
CVE-2013-0629
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013.