CVE-2010-1294: Infoleak
Published May 13, 2010
·Updated
Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows local users to obtain sensitive information via unknown vectors.
Affected Software
11 affected components
Adobe ColdFusion<=9.0
Adobe ColdFusion=4.5
Adobe ColdFusion=5.0
Adobe ColdFusion=6.0
Adobe ColdFusion=6.1
Adobe ColdFusion=7.0
Adobe ColdFusion=7.0.1
Adobe ColdFusion=7.0.2
Adobe ColdFusion=7.2-unknown
Adobe ColdFusion=8.0
Adobe ColdFusion=8.0.1
Remediation
Patch Available
Event History
May 13, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1294?
CVE-2010-1294 has not been assigned an official CVSS score, but it is considered a serious local information disclosure vulnerability.
2
How do I fix CVE-2010-1294?
To mitigate CVE-2010-1294, users should upgrade Adobe ColdFusion to the latest version available.
3
What versions of Adobe ColdFusion are affected by CVE-2010-1294?
CVE-2010-1294 affects Adobe ColdFusion versions 5.0 through 9.0, including specific subversions 8.0, 8.0.1, and 7.0.2.
4
Can CVE-2010-1294 be exploited remotely?
No, CVE-2010-1294 is a local vulnerability, which means it requires local access to exploit.
5
What kind of information could be compromised due to CVE-2010-1294?
CVE-2010-1294 could allow local users to access sensitive information, although the specifics of the information are not detailed.