CVE-2000-0189 in ColdFusion Server

Riassunto

di MITRE

ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Divulgazione: 01/03/2000
• Moderazione: accettato
• Voce: VDB-15365
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.0 (NVD)
• EPSS: 0.01931
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2000-0189
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2000-0189
• CVE Details: https://www.cvedetails.com/cve/CVE-2000-0189/