ID de Prueba:	1.3.6.1.4.1.25623.1.0.809027
Categoría:	Web application abuses
Título:	Adobe ColdFusion 'XML External Entity' Information Disclosure Vulnerability (APSB16-30)
Resumen:	Adobe ColdFusion is prone to an information disclosure vulnerability.
Descripción:	Summary: Adobe ColdFusion is prone to an information disclosure vulnerability. Vulnerability Insight: The flaw is due to an error in parsing crafted XML entities. Vulnerability Impact: Successful exploitation will allow remote attackers to obtain sensitive information about the application. Affected Software/OS: ColdFusion 10 before Update 21 and 11 before Update 10. Solution: Upgrade to version 10 Update 21 or 11 Update 10 or later. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-4264 BugTraq ID: 92684 http://www.securityfocus.com/bid/92684 Bugtraq: 20160907 CVE-2016-4264 Adobe ColdFusion <= 11 XXE Vulnerability (Google Search) http://www.securityfocus.com/archive/1/539374/100/0/threaded https://www.exploit-db.com/exploits/40346/ http://legalhackers.com/advisories/Adobe-ColdFusion-11-XXE-Exploit-CVE-2016-4264.txt http://www.securitytracker.com/id/1036708
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.