Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Macromedia ColdFusion MX错误消息泄露软件安装路径漏洞
Vulnerability Description
Macromedia Cold Fusion MX Server是一款强大的WEB应用服务程序，可以自动建立站点和WEB应用程序。 当Cold Fusion MX服务程序接收到畸形URL请求时会返回错误信息，远程攻击者可以利用这些信息进一步对系统进行攻击。 默认安装下，Macromedia ColdFusion MX服务程序在8500端口启动WEB服务(JRun)，用于管理用途，当服务器接收到 http://host:8500/CFIDE/probe.cfm 请求时，会返回包含MX服务器安装路径的错误信息
CVSS Information
N/A
Vulnerability Type
N/A