Description
ColdFusion RDS Service is enabled and publicly available to any IP address. The service is intended for development use only and must be protected with a strong password.
Remediation
Disable RDS Service in the ColdFusion Administrator.
References
Related Vulnerabilities
Apache Tomcat version older than 6.0.36
WordPress Plugin Yoast SEO Information Disclosure (3.2.4)
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3412)
WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.27)
WordPress Plugin Contact Form 7 Database Information Disclosure (1.3)