Lucene search

[email protected]CVE-2011-0737

HistoryFeb 01, 2011 - 6:00 p.m.

CVE-2011-0737

2011-02-0118:00:04

CWE-200

[email protected]

web.nvd.nist.gov

adobe

coldfusion

cve-2011-0737

information security

data breach

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.4%

JSON

Adobe ColdFusion 9.0.1 CHF1 and earlier allows remote attackers to obtain sensitive information via an id=- query to a .cfm file, which reveals the installation path in an error message. NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debug Output Settings sections of the ColdFusion Lockdown guide explain the requirement for settings that prevent this information disclosure

Affected configurations

NVD

Node

adobecoldfusionRange≤9.0.1chf1

adobecoldfusionMatch4.5

adobecoldfusionMatch5.0

adobecoldfusionMatch6.0

adobecoldfusionMatch6.1

adobecoldfusionMatch7.0

adobecoldfusionMatch7.0.1

adobecoldfusionMatch7.0.2

adobecoldfusionMatch8.0

adobecoldfusionMatch8.0.1

adobecoldfusionMatch8.1

adobecoldfusionMatch9.0

adobecoldfusionMatch9.0.1

CPENameOperatorVersion
adobe:coldfusionadobe coldfusionle9.0.1
adobe:coldfusionadobe coldfusioneq4.5
adobe:coldfusionadobe coldfusioneq5.0
adobe:coldfusionadobe coldfusioneq6.0
adobe:coldfusionadobe coldfusioneq6.1
adobe:coldfusionadobe coldfusioneq7.0
adobe:coldfusionadobe coldfusioneq7.0.1
adobe:coldfusionadobe coldfusioneq7.0.2
adobe:coldfusionadobe coldfusioneq8.0
adobe:coldfusionadobe coldfusioneq8.0.1

CPE	Name	Operator	Version
adobe:coldfusion	adobe coldfusion	le	9.0.1
adobe:coldfusion	adobe coldfusion	eq	4.5
adobe:coldfusion	adobe coldfusion	eq	5.0
adobe:coldfusion	adobe coldfusion	eq	6.0
adobe:coldfusion	adobe coldfusion	eq	6.1
adobe:coldfusion	adobe coldfusion	eq	7.0
adobe:coldfusion	adobe coldfusion	eq	7.0.1
adobe:coldfusion	adobe coldfusion	eq	7.0.2
adobe:coldfusion	adobe coldfusion	eq	8.0
adobe:coldfusion	adobe coldfusion	eq	8.0.1

Rows per page:

1-10 of 121

References

archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html

osvdb.org/70781

websecurity.com.ua/4879/

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.4%

JSON

Related for CVE-2011-0737

nvd1 prion1 cvelist1 vulnrichment1