2 matches found
Adobe ColdFusion RDS Authentication Bypass
Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication using the RDS component. Due to default settings or misconfiguration, its password can be set to an empty value. This allows an attacker to create a session via the RDS login that can be carried over to th...
10CVSS9.1AI score0.93691EPSS
SaveExploits13
20