PT-2001-1089 · Adobe · Coldfusion Server

Publicado 2001-03-12 · Atualizado 2008-09-09 · CVE-1999-0922

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ColdFusion Server version 4.0

Description The issue allows remote attackers to view source code. This is possible through the "sourcewindow.cfm" file.

Recommendations For ColdFusion Server version 4.0, restrict access to the "sourcewindow.cfm" file to prevent remote attackers from viewing source code.

Correção

Identificadores relacionados

CVE-1999-0922

Produtos afetados

Coldfusion Server

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-0922 · Nota de Segurança
• http://allaire.com/handlers/index.cfm?ID=8739&Method=Full · Aviso do Fabricante