Security Advisory

CVE-2010-5290

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-09-20 16:00:00

Last updated 2024-08-07 04:17:10

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different vulnerability than CVE-2010-2861.

← Browse all CVEs View on cve.org ↗