Adobe ColdFusion "filename" Arbitrary File Disclosure Vulnerability

A vulnerabilities has been identified in Adobe ColdFusion, which can be exploited by an unauthorized user to remotely retrieve files stored on the server.

Input passed via the "filename" parameter to administrator/mail/download.cfm in the CFIDE/adminapi section is not properly verified before being used to access files. This can be exploited to disclose the contents of arbitrary files on the server via directory traversal sequences.

Successful exploitation requires that access to the CFIDE/administrator, CFIDE/adminapi, and CFIDE/gettingstarted directories is not restricted.

Note: A proof of concept exploit code is publicly available.