Adobe.ColdFusion.filename.Directory.Traversal

Description

This indicates an attack attempt to exploit a Directory Traversal vulnerability in Adobe ColdFusion server.
The vulnerability is due to an error when the vulnerable software handles a malicious http request. A remote attacker can exploit this to gain unauthorized access to sensitive information via a crafted http request.

Affected Products

Adobe Systems ColdFusion 9.0.2
Adobe Systems ColdFusion 10
Adobe Systems ColdFusion 9.0.1
Adobe Systems ColdFusion 9.0

Impact

Information Disclosure: Remote attackers can read arbitrary file from vulnerable systems.

Recommended Actions

Refer to the vendor's website for suggested workaround.
http://www.adobe.com/support/security/bulletins/apsb13-13.html

References