This script is Copyright (C) 2014-2015 Tenable Network Security, Inc.
An application hosted on the remote web server is affected by an HTTP
response splitting vulnerability.
The version of Adobe ColdFusion running on the remote host is affected
by an HTTP response splitting vulnerability.
The coldfusion.filter.ComponentFilter class does not properly sanitize
input used in the Location header of an HTTP response. A remote
attacker could exploit this by tricking a user into making a malicious
request, resulting in the injection of HTTP headers, modification of
the HTTP response body, or splitting the HTTP response into multiple
See also :
Apply the hotfixes referenced in Adobe advisory APSB12-15.
Risk factor :
Medium / CVSS Base Score : 4.3
CVSS Temporal Score : 3.6
Public Exploit Available : true