Skip to main content
Anonymous
Dec 1, 2016 10:04 PM UTC
Answered

Cold Fusion Vulnerability issue

Hi all,

I am new to cold fusion and i am facing a problem which has been pointed out by our security team on an application wirtten in cold fusion:

We have an application written in cold fusion, for which the login page is lets say the below -

https://xxx.com/vendor/index.cfm

Now the vendor is the root directory and it has subdirectories containing the cfm files. So if i do https://xxx.com/vendor/common/abc.cfm , i am able to access the abc.cfm which is in the common folder inside the vendor directory. Now the problem is that if i do https://xxx.com/vendor/common/ , it shows meon browser the list of files present in the common directory, which is not acceptable.. I can see that putting index.cfm in the common folder resolves the problem by redirecting me to the index page. But since there are approximately 120 subdirectories , is there a way to do this in a better way other than putting an index.cfm in every folder ? I tried the missing page handler on the server colsole but no luck.

Any assistance will be greatly appreciated.

    This topic is closed to new replies. Start a new post to keep the conversation going.
    Correct answer
    Dec 2, 2016 12:57 AM UTC

    i disabled directory browsing on iis , that did the trick . Thanks a lot for your help !!!! If i see any issue , i will post again.

    View reply

    6 replies

    Priyank Shrivastava.
    Priyank Shrivastava.
    Inspiring
    Dec 1, 2016 10:14 PM UTC

    Hi,

    If I understood the problem correctly then you have directory browsing enable at webserver. First please disable it and then check it.

    Thanks,

    Priyank

    Translate
    Thanks, Priyank Shrivastava
    Anonymous
    Dec 2, 2016 12:42 AM UTC

    hi priyank,

    thanks for the reply.

    I tried the following -

    going to C:\ColdFusion10\cfusion\runtime\conf  web.xml and changing the value of listings parameter -

    <servlet>

            <servlet-name>default</servlet-name>

            <servlet-class>org.apache.catalina.servlets.DefaultServlet</servlet-class>

            <init-param>

                <param-name>debug</param-name>

                <param-value>0</param-value>

            </init-param>

            <init-param>

         <!-- secure profile disable start -->

                <param-name>listings</param-name>

                <param-value>false</param-value>

                <!-- secure profile disable end -->

         <!-- secure profile enable start

                <param-name>listings</param-name>

                <param-value>false</param-value>

                secure profile enable end -->

            </init-param>

            <load-on-startup>1</load-on-startup>

        </servlet>

    I changed the listing from true to false, but no luck so far.

    Translate
    Anonymous
    Correct answer
    Dec 2, 2016 12:57 AM UTC

    i disabled directory browsing on iis , that did the trick . Thanks a lot for your help !!!! If i see any issue , i will post again.

    Translate
    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices