Description

This ColdFusion web application is running with Request Debugging turned on. The Request Debugging feature displays detailed information about version of ColdFusion, server variables, etc.

Remediation

Disable Request Debugging feature or allow access to it only for certain IP addresses in the ColdFusion Administrator.

References

Configuring debugging in the ColdFusion Administrator

Related Vulnerabilities

WordPress Plugin Simple Download Button Shortcode 'file' Parameter Information Disclosure (1.0)

Unencrypted __VIEWSTATE parameter

WordPress Plugin Credova_Financial Information Disclosure (1.4.8)

Symfony Profiler open

WordPress Plugin Backup Migration Information Disclosure (1.2.8)

Severity

Medium

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure