{"id":"CVE-2010-2861","kind":"vulnerability","aliases":["CVE-2010-2861"],"related":[],"title":"Adobe ColdFusion: Adobe ColdFusion Directory Traversal Vulnerability","description":"Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/.","summary":"Adobe ColdFusion's administrator console has a directory traversal flaw that lets remote attackers read arbitrary files on the server. It is listed in CISA's Known Exploited Vulnerabilities catalog and is used in ransomware campaigns.","severity":"critical","cvss":9.8,"epss":0.99747,"exploited":true,"exploited_at":"2022-03-25T00:00:00+00:00","products":[{"name":"Adobe ColdFusion","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["adobe","coldfusion","exploited","ransomware","runtime","self-hosted"],"not_affected_if":["administrator-console-not-exposed","not-coldfusion"],"how_to_check":null,"fix":"Apply the Adobe ColdFusion updates per vendor instructions; the specific fixed version is unknown from these sources.","status":"open","published_at":"2010-08-11T18:47:51+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:22:03+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"runtime","confidence":0.8,"triage":{"at":"2026-10-23T21:22:03Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Adobe ColdFusion updates per vendor instructions; the specific fixed version is unknown from these sources.","reach":"internet","impact":"high","summary":"Adobe ColdFusion's administrator console has a directory traversal flaw that lets remote attackers read arbitrary files on the server. It is listed in CISA's Known Exploited Vulnerabilities catalog and is used in ransomware campaigns.","category":"runtime","who_cares":["coldfusion","adobe","self-hosted"],"confidence":0.8,"needs_auth":"unknown","worst_case":"Attacker reads arbitrary server files, including credentials and config secrets.","analyst_note":"Find the affected and fixed ColdFusion versions and the exact admin console paths or mitigations in the Adobe advisory and the CISA KEV entry.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["not-coldfusion","administrator-console-not-exposed"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000472,"input_tokens":2835,"output_tokens":376,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2010':9A,12A '-2861':10A,13A '1':86C '2':88C '3':90C '4':92C '5':95C '9.0.1':71C 'administr':27B,66C 'adob':1A,3A,16B,24B,69C 'adobe':14A 'allow':74C 'arbitrari':39B,79C 'attack':37B,76C 'campaign':59B 'catalog':53B 'cfide/administrator':98C 'cfide/administrator/settings/mappings.cfm':87C 'cisa':48B 'coldfus':2A,4A,17B,25B,70C 'coldfusion':15A 'consol':28B,67C 'cve':8A,11A 'datasources/index.cfm':91C 'directori':5A,31B,61C 'earlier':73C 'enter.cfm':96C 'exploit':18B,51B 'file':40B,80C 'flaw':33B 'host':23B 'j2eepackaging/editarchive.cfm':93C 'known':50B 'let':35B 'list':46B 'local':83C 'logging/settings.cfm':89C 'multipl':60C 'paramet':84C 'ransomwar':19B,58B 'read':38B,78C 'remot':36B,75C 'runtim':20B 'self':22B 'self-host':21B 'server':43B 'travers':6A,32B,62C 'use':56B 'via':81C 'vulner':7A,52B,63C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2010-08-11T18:47:51+00:00","kev":{"dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Known"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2010-2861","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-2861","severity":null,"published_at":"2022-03-25T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T10:39:07+00:00","note":null},{"source":"epss","external_id":"CVE-2010-2861","url":"https://api.first.org/data/v1/epss?cve=CVE-2010-2861","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2010-2861","url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2861","severity":null,"published_at":"2010-08-11T18:47:51+00:00","modified_at":"2026-10-02T14:55:20+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}