[Openvas-discuss] Adobe ColdFusion vulnerabilities not reported
darryl at ccservices.nl
Fri Aug 24 12:08:47 CEST 2012
I am scanning a server for a client with an older version of Adobe
ColdFusion on it. When I used to scan the server with Nessus, a serious and
several medium vulnerabilities would be reported. Now that I am scanning
with OpenVAS, none of the vulnerabilities are reported with the exception of
a Low indicating that ColdFusion has been found (see below).
Low (CVSS: 0.0)
NVT: ColdFusion Detection (OID: 18.104.22.168.4.1.25622.214.171.124773)
This host is running Adobe ColdFusion.
I have other plugins for Adobe ColdFusion enabled (for example
gb_adobe_coldfusion_http_resp_splitting_vuln.nasl) but the expected
vulnerabilities are not reported. What could the problem be?
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Openvas-discuss