CWE Code: 255
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Credentials Management
Summary: the authentication process in adobe coldfusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different vulnerability than cve-2010-2861. the cvss score reflects previously published information indicating successful exploitation allows system access on certain operating systems.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-09-20
Last Modified Date: 2017-08-29