CVE-2005-1022 ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses directory, which allows remote attackers to obtain sensitive information.
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ColdFusion 6.1 Updater 1 places Java .class files under the web root in the /WEB-INF/cfclasses directory, which allows remote attackers to obtain sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| macromedia coldfusion | = 6.1 | No fix listed |
References
- 20050407 Macromedia Security Bulletin - ColdFusion MX 6.1 mailing-list
- www.macromedia.com patch vendor-advisory