CVE-2010-2861

Adobe ColdFusion Directory Traversal Vulnerability

Coldfusion

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/.

11. Aug 2010

Ausgewertete Quellen

• Hersteller
  http://www.adobe.com/support/security/bulletins/apsb10-18.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2861
• CISA
  Adobe ColdFusion Directory Traversal Vulnerability
• NVD
  CVE-2010-2861