ID:396 - Exploit for Information disclosure in ColdFusion - CVE-2016-4264

Link to public exploit:

Vulnerability description

The vulnerability allows attackers to gain access to potentially sensitive data.

The vulnerability exists due to flaw in XML objects analysis engine. A remote attacker supply specially crafted XML data and obtain potentilally sensitive information.

Successful exploitation of this vulnerability will allow an attacker to obtain sensitive information.

Remediation