Adobe ColdFusion HTTP Response Splitting (APSB12-15) (credentialed check)
Medium Nessus Plugin ID 74190
SynopsisAn application hosted on the remote web server is affected by an HTTP response splitting vulnerability.
DescriptionThe version of Adobe ColdFusion running on the remote host is affected by an HTTP response splitting vulnerability.
The coldfusion.filter.ComponentFilter class does not properly sanitize input used in the Location header of an HTTP response. A remote attacker could exploit this by tricking a user into making a malicious request, resulting in the injection of HTTP headers, modification of the HTTP response body, or splitting the HTTP response into multiple responses.
SolutionApply the hotfixes referenced in Adobe advisory APSB12-15.