low2.1Public exploit code
CVE-1999-0757
The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Allaire ColdFusion Server 4.0.1 - 'CFCRYPT.EXE' Decrypt Pages1998-05-19 · local · windows · Verified
Impact
The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Allaire | Coldfusion Server | All versions |