VULNERABILITY INTELLIGENCE
CVE-2010-5290
CVSS score10 HIGH
EPSS probability5.53%
CISA KEVNot currently listed
Published2013-09-20
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different vulnerability than CVE-2010-2861.