CVE-1999-1124

CVE-1999-1124 describes a flaw in the HTTP Client application within ColdFusion where an attacker can bypass access restrictions on pages on other ports. The root cause is that the mainframeset.cfm flow retrieves the target page from the server, making it appear as if the request originates from ...