Description

One or more pages were found to contain an ColdFusion error message that discloses the installation path and other potentially sensitive data.

Remediation

Review the source code for the affected pages.

References

OWASP - Information Disclosure

Adobe ColdFusion - Lockdown Guide

Related Vulnerabilities

Node.js Running in Development Mode

WordPress Plugin Redux Framework Multiple Vulnerabilities (4.2.11)

WordPress Plugin Doneren met Mollie Information Disclosure (2.8.4)

WordPress Plugin YaySMTP-Simple WP SMTP Mail Information Disclosure (2.2)

phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4999)

Severity

Low

Classification

CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure