THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2010-2861 (CRITICAL 9.8) — Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/inde

[NVD] CVE-2010-2861 (CRITICAL 9.8) — Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/inde

lownvdPublished 2010-08-11

CVE-2010-2861 CVSS: 9.8 CRITICAL Published: 2010-08-11T18:47:51.157

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) e

MITRE ATT&CK techniques

VulnerabilitiesT1588.006

Indicators of compromise

CVE-2010-2861cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2010-2861