PT-2013-1384
CVE-2010-5290
·
تاريخ النشر
2013-09-20
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Adobe ColdFusion versions prior to 10
Description
The authentication process in Adobe ColdFusion does not require knowledge of the cleartext password if the password hash is known. This makes it easier for attackers to obtain administrative privileges by leveraging read access to the configuration file.
Recommendations
For versions prior to 10, update to version 10 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾