CVE-2003-1469

medium

Description

The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/11879

https://euvd.enisa.europa.eu/vulnerability/EUVD-2003-1459

http://www.securityfocus.com/bid/7443

http://www.securityfocus.com/archive/1/319867

http://www.nii.co.in/vuln/pdmac.html

http://securityreason.com/securityalert/3307

Details

Source: Mitre, NVD

Published: 2003-12-31

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.06191