Signature Detail
Short Name |
HTTP:INFO:NULL-AUTH |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Release Date |
2006/10/20 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Null Password Authentication
This signature detects an HTTP request with authentication where the password is null. This is generally insecure.
Extended Description
It has been reported that, by default, the RDS service uses a blank password for authentication. This could allow an unauthenticated user to access the vulnerable ColdFusion MX server.
Affected Products
- Macromedia ColdFusion Server MX Developer
- Macromedia ColdFusion Server MX Enterprise
- Macromedia ColdFusion Server MX Professional
- Macromedia ColdFusion Server MX 6.0.0
References