CVE

Id
47874  
CVE No.
CVE-2010-5290  
Status
Candidate  
Description
The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different vulnerability than CVE-2010-2861.  
Phase
Assigned (20130920)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
520422 47874 CVE-2010-5290 MISC:http://qualys.immunityinc.com/home/exploitpack/CANVAS/CF_directory_traversal  View
520423 47874 CVE-2010-5290 MISC:http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/  View
520424 47874 CVE-2010-5290 OSVDB:97553  View
520425 47874 CVE-2010-5290 URL:http://osvdb.org/97553  View
520426 47874 CVE-2010-5290 XF:adobe-coldfusion-cve20105290-priv-esc(87740)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39876 JVNDB-2010-005661 WordPress の wp-admin/includes/file.php におけるクロスサイトスクリプティングの脆弱性 WordPress の wp-admin/includes/file.php の request_filesystem_credentials 関数には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-5294 47874 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005661.html  View