Test ID:	1.3.6.1.4.1.25623.1.0.802660
Category:	Web application abuses
Title:	Adobe ColdFusion HTTP Response Splitting Vulnerability (APSB12-15)
Summary:	Adobe ColdFusion is prone to a response splitting vulnerability.
Description:	Summary: Adobe ColdFusion is prone to a response splitting vulnerability. Vulnerability Insight: This flaw exists because the application does not validate an unspecified HTTP header before returning it to the user. This can be exploited to insert arbitrary HTTP headers, which will be included in a response sent to the user. Vulnerability Impact: Successful exploitation will allow attackers to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into a false sense of trust. Affected Software/OS: Adobe ColdFusion versions 8.0 through 9.0.1. Solution: Apply the patch from the referenced advisory. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2041
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.