CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2010-08-11
Adobe ColdFusion Administrator Console Directory Traversal LFI Vulnerability (CVE-2010-2861)
[Affected Scope] Adobe ColdFusion 9.0.1 and earlier versions containing the CFIDE/administrator console
[Impact] Unauthenticated remote attackers can exploit directory traversal to read arbitrary system and configuration files, potentially retrieving administrator password hashes and fully compromising the server
[Mitigation] Apply the official APSB10-18 security patch, restrict external access to the CFIDE directory, or upgrade to a supported secure version