CVE-2004-0928: Medium severity Hitachi Cosminexus Enterprise vulnerability
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0928?
CVE-2004-0928 is considered a high-severity vulnerability due to potential unauthorized access to sensitive files.
How do I fix CVE-2004-0928?
To fix CVE-2004-0928, ensure that recent patches are applied to affected software versions and review authentication settings.
What software is affected by CVE-2004-0928?
CVE-2004-0928 affects Macromedia JRun 3.0, 3.1, and 4.0, as well as Macromedia ColdFusion 6.0, 6.1, and specific versions of Hitachi Cosminexus.
Can CVE-2004-0928 lead to data exposure?
Yes, CVE-2004-0928 can allow remote attackers to access and view source files, leading to potential data exposure.
Is CVE-2004-0928 a remote code execution vulnerability?
CVE-2004-0928 is not directly a remote code execution vulnerability but allows bypassing authentication, which can lead to further exploitation.