Adobe ColdFusion CVE-2010-5290 Authentication Bypass Vulnerability
BID:62695
Info
Adobe ColdFusion CVE-2010-5290 Authentication Bypass Vulnerability
| Bugtraq ID: | 62695 |
| Class: | Design Error |
| CVE: |
CVE-2010-5290 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 20 2013 12:00AM |
| Updated: | Sep 20 2013 12:00AM |
| Credit: | Immunity CANVAS |
| Vulnerable: |
Adobe ColdFusion 9.0.2 Adobe ColdFusion 9.0.1 Adobe ColdFusion 9.0 |
| Not Vulnerable: |
Adobe ColdFusion 10 |
Discussion
Adobe ColdFusion CVE-2010-5290 Authentication Bypass Vulnerability
Adobe ColdFusion is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication mechanism and obtain sensitive information. This may aid in further attacks.
Versions prior to Adobe ColdFusion 10 are vulnerable.
Adobe ColdFusion is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication mechanism and obtain sensitive information. This may aid in further attacks.
Versions prior to Adobe ColdFusion 10 are vulnerable.
Exploit / POC
Adobe ColdFusion CVE-2010-5290 Authentication Bypass Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Adobe ColdFusion CVE-2010-5290 Authentication Bypass Vulnerability
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
References
Adobe ColdFusion CVE-2010-5290 Authentication Bypass Vulnerability
References:
References:
- Adobe ColdFusion Homepage (Adobe)