CVE-2003-1469 The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request t...
MediumCVSS 5.0
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia coldfusion | All versions | No fix listed |
| macromedia coldfusion | = 6.0 | No fix listed |
| macromedia coldfusion professional | All versions | No fix listed |
References
- 3307 third-party-advisory
- www.nii.co.in
- 20030426 NII Advisory - Path Disclosure in Cold Fusion MX Server mailing-list
- 7443 exploit vdb-entry
- coldfusion-mx-path-disclosure(11879) vdb-entry