QwikSec

Security Database

CVE

CWE

Training

CVE-2003-1469

Published: Oct 24, 2007

Modified: Aug 8, 2024

PUBLISHED

Description

The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20030426 NII Advisory - Path Disclosure in Cold Fusion MX Server

mailing-list

x_refsource_BUGTRAQ

coldfusion-mx-path-disclosure(11879)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_BID

http://www.nii.co.in/vuln/pdmac.html

x_refsource_MISC

third-party-advisory

x_refsource_SREASON

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.