Description

This ColdFusion web application is running with Robust Exception turned on. The Robust Exception feature displays detailed information about exceptions and can include the script locations, stack traces, SQL statements, etc.

Remediation

Disable Robust Exception feature in the ColdFusion Administrator.

References

Configuring debugging in the ColdFusion Administrator

Related Vulnerabilities

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Information Disclosure (3.4.7)

TCExam Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-20114)

WordPress REST API User Enumeration

WordPress Plugin Stop User Enumeration Cross-Site Scripting (1.3.7)

WordPress 5.5.x Multiple Vulnerabilities (5.5 - 5.5.10)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure