VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 20, 2013· Updated Jun 16, 2026

CVE-2010-5290

CVE-2010-5290

Description

The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different vulnerability than CVE-2010-2861.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Adobe Inc./Coldfusion4 versions
    cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*range: <=9.0.2
    • cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:9.0.1:*:*:*:*:*:*:*
    • (no CPE)range: <10

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.