Lucene search

K
cve[email protected]CVE-2009-1876
HistoryAug 18, 2009 - 10:30 p.m.

CVE-2009-1876

2009-08-1822:30:00
web.nvd.nist.gov
29
cve-2009-1876
adobe coldfusion
information disclosure
vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.207 Low

EPSS

Percentile

96.4%

Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a “double-encoded null character vulnerability.”

Affected configurations

NVD
Node
adobecoldfusionRange8.0.1
OR
adobecoldfusionMatch6.0
OR
adobecoldfusionMatch6.0enterprise_multi-server
OR
adobecoldfusionMatch6.0enterprise_server
OR
adobecoldfusionMatch6.0linux
OR
adobecoldfusionMatch6.0solaris
OR
adobecoldfusionMatch6.1
OR
adobecoldfusionMatch6.1enterprise_multi-server
OR
adobecoldfusionMatch6.1enterprise_server
OR
adobecoldfusionMatch6.1linux
OR
adobecoldfusionMatch6.1solaris
OR
adobecoldfusionMatch7.0
OR
adobecoldfusionMatch7.0enterprise_multi-server
OR
adobecoldfusionMatch7.0enterprise_server
OR
adobecoldfusionMatch7.0linux
OR
adobecoldfusionMatch7.0solaris
OR
adobecoldfusionMatch7.0.1
OR
adobecoldfusionMatch7.0.2
OR
adobecoldfusionMatch7.2unknownmx
OR
adobecoldfusionMatch8.0

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.207 Low

EPSS

Percentile

96.4%