Description

This ColdFusion web application is running with Request Debugging turned on. The Request Debugging feature displays detailed information about version of ColdFusion, server variables, etc.

Remediation

Disable Request Debugging feature or allow access to it only for certain IP addresses in the ColdFusion Administrator.

References

Configuring debugging in the ColdFusion Administrator

Related Vulnerabilities

TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-3664)

Atlassian Confluence information disclosure

Apache Tomcat version older than 4.1.37

WordPress Plugin wptf-image-gallery Arbitrary File Download (1.0.3)

Twisted Web HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-21712)

Severity

Medium

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure