⚠ Actively exploited in ransomware campaigns
This vulnerability is on the CISA Known Exploited Vulnerabilities list and has been used in known ransomware attacks. CISA required action: Apply updates per vendor instructions.. Due date: 2022-04-15.

CVE-2010-2861 — Path Traversal in Adobe Coldfusion

CWE-22 — Path Traversal11 documents8 sources
Severity
9.8CRITICALNVD
EPSS
94.3%
top 0.07%
CISA KEV
KEVRansomware
Added 2022-03-25
Due 2022-04-15
Exploit
Exploited in wild
Active exploitation observed
Affected products
1
Adobe Coldfusion
Timeline
PublishedAug 11
KEV addedMar 25
KEV dueApr 15
Latest updateMay 17
CISA Required Action: Apply updates per vendor instructions.

Description

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDadobe/coldfusion9.0.1

🔴Vulnerability Details

3
GHSA
GHSA-x38c-xq6c-937h: Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9↗2022-05-17
▶
CVEList
CVE-2010-2861: Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9↗2010-08-11
▶
VulnCheck
Adobe ColdFusion Directory Traversal Vulnerability↗2010
▶

💥Exploits & PoCs

3
Exploit-DB
Adobe ColdFusion - Directory Traversal (Metasploit)↗2011-03-16
▶
Exploit-DB
Adobe ColdFusion - Directory Traversal↗2010-08-14
▶
Nuclei
Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI
▶

🔍Detection Rules

3
Suricata
ET WEB_SERVER WEBSHELL CFM Shell Access↗2014-03-18
▶
Suricata
ET WEB_SERVER ColdFusion Path Traversal (locale 5/5)↗2010-09-28
▶
Suricata
ET WEB_SERVER ColdFusion Path Traversal (locale 3/5)↗2010-09-28
▶

📋Vendor Advisories

1
CISA
Adobe ColdFusion Directory Traversal Vulnerability↗2022-03-25
▶
CVE-2010-2861 — Path Traversal in Adobe Coldfusion | cvebase