PT-2001-1089 · Adobe · Coldfusion Server

Published 2001-03-12 · Updated 2008-09-09 · CVE-1999-0922

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ColdFusion Server version 4.0

Description The issue allows remote attackers to view source code. This is possible through the "sourcewindow.cfm" file.

Recommendations For ColdFusion Server version 4.0, restrict access to the "sourcewindow.cfm" file to prevent remote attackers from viewing source code.

Fix

Related Identifiers

CVE-1999-0922

Affected Products

Coldfusion Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-0922 · Security Note
• http://allaire.com/handlers/index.cfm?ID=8739&Method=Full · Vendor Advisory