PT-1999-1583 · Adobe · Coldfusion

Publicado 1999-12-31 · Atualizado 2008-09-05 · CVE-1999-1124

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ColdFusion (affected versions not specified)

Description The issue allows remote attackers to bypass access restrictions for web pages on other ports. This is achieved by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1124

Produtos afetados

Coldfusion

Referências · 2

• http://packetstorm.securify.com/mag/phrack/phrack54/P54-08 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1124 · Nota de Segurança