CVE-2010-5290

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions prior to 10

Description The authentication process in Adobe ColdFusion does not require knowledge of the cleartext password if the password hash is known. This makes it easier for attackers to obtain administrative privileges by leveraging read access to the configuration file.

Recommendations For versions prior to 10, update to version 10 or later to resolve the issue.