← Back

CVE-2004-0928

nvd nist
Published: Oct 5, 2004Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".

Affected (11)

Hitachi
2 products
Cosminexus Enterprise
Cosminexus Server
Macromedia
2 products
Coldfusion
Jrun
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Hitachi
Cosminexus Enterprise
Version 01_01_1
Cosminexus Enterprise
Version 01_01_1
Cosminexus Enterprise
Version 01_02_2
Cosminexus Enterprise
Version 01_02_2
Hitachi
Cosminexus Server
Version web_01-01_1
Cosminexus Server
Version web_01-01_2
Macromedia
Coldfusion
Version 6.0
Coldfusion
Version 6.1
Macromedia
Jrun
Version 3.0
Jrun
Version 3.1
Jrun
Version 4.0

References (18)

Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchThird Party AdvisoryUS Government Resource
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.