CVE-2003-1469

The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message.

🔗 References (10)

• cve@mitrehttp://securityreason.com/securityalert/3307
• cve@mitrehttp://www.nii.co.in/vuln/pdmac.html
• cve@mitrehttp://www.securityfocus.com/archive/1/319867
• cve@mitrehttp://www.securityfocus.com/bid/7443
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/11879
• af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/3307
• af854a3a-2127-422b-91ae-364da2661108http://www.nii.co.in/vuln/pdmac.html
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/319867
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/7443
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/11879