FKIE_CVE-2011-0736

Vulnerability from fkie_nvd - Published: 2011-02-01 18:00 - Updated: 2025-04-11 00:51
Severity ?
5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Summary
Adobe ColdFusion 9.0.1 CHF1 and earlier, when a web application is configured to use a DBMS, allows remote attackers to obtain potentially sensitive information about the database structure via an id=- query to a .cfm file. NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debug Output Settings sections of the ColdFusion Lockdown guide explain the requirement for settings that prevent this information disclosure
References
cve@mitre.orghttp://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.htmlExploit
cve@mitre.orghttp://osvdb.org/70780
cve@mitre.orghttp://websecurity.com.ua/4879/Exploit
af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.htmlExploit
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/70780
af854a3a-2127-422b-91ae-364da2661108http://websecurity.com.ua/4879/Exploit
Impacted products
Vendor Product Version
adobe coldfusion *
adobe coldfusion 4.5
adobe coldfusion 5.0
adobe coldfusion 6.0
adobe coldfusion 6.1
adobe coldfusion 7.0
adobe coldfusion 7.0.1
adobe coldfusion 7.0.2
adobe coldfusion 8.0
adobe coldfusion 8.0.1
adobe coldfusion 8.1
adobe coldfusion 9.0
adobe coldfusion 9.0.1
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:*:chf1:*:*:*:*:*:*",
              "matchCriteriaId": "C855D9BA-832F-4C79-90D6-4268DA717922",
              "versionEndIncluding": "9.0.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D37C9E4-CDFC-450B-AEE8-DB204AFB7030",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "91CF7A97-1D87-44B7-804E-17E4037FC763",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "73DAF349-B29C-44D0-818B-8D665D2B35EC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "720437A6-66D3-4DD6-A40F-23FC107AD710",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "31D67D32-16BD-437C-8423-4704364EE737",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C1CF5F6-BA6A-4EAC-8E94-238E0B9C64B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B015715F-9672-480E-B0AA-968D8C9070D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DD6C1877-7412-4FBE-9641-334971F9D153",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:8.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "28C8D6AF-EDE1-42BD-A47C-2EF8690299BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "810E1B9C-E32F-4788-8705-67F855DC9EE6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "113431FB-E4BE-4416-800C-6B13AD1C0E92",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:adobe:coldfusion:9.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7FBC38B4-D957-4645-BA96-E99975271482",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [
    {
      "sourceIdentifier": "cve@mitre.org",
      "tags": [
        "disputed"
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Adobe ColdFusion 9.0.1 CHF1 and earlier, when a web application is configured to use a DBMS, allows remote attackers to obtain potentially sensitive information about the database structure via an id=- query to a .cfm file.  NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debug Output Settings sections of the ColdFusion Lockdown guide explain the requirement for settings that prevent this information disclosure"
    },
    {
      "lang": "es",
      "value": "** DISPUTADA ** Adobe ColdFusion 9.0.1 CHF1 y anteriores, cunado una aplicaci\u00f3n web est\u00e1 configurada para utilizar un DBMS, permite a atacantes remotos obtener informaci\u00f3n potencialmente sensible acerca de la estructura de la base de datos a trav\u00e9s de una consulta id=- a un fichero .cfm. NOTA: El proveedor disputa la importancia de este problema porque las secciones Site-wide Error Handler y Debug Output Settings de la gu\u00eda ColdFusion Lockdown explican el requisito para las configuraciones que previenen esta divulgaci\u00f3n de informaci\u00f3n."
    }
  ],
  "id": "CVE-2011-0736",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2011-02-01T18:00:03.970",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/70780"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://websecurity.com.ua/4879/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/70780"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://websecurity.com.ua/4879/"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.