CVE-2010-2861
CRITICAL KEV RANSOMWARE NUCLEIAdobe ColdFusion <9.0.1 - Path Traversal
Title source: llmExploitation Summary
CVE-2010-2861 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 25, 2022, with confirmed use in ransomware campaigns.
EIP tracks 4 public exploits from researchers including Metasploit, anonymous, greysneakthief, including a Metasploit module auxiliary/scanner/http/coldfusion_locale_traversal.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in Adobe ColdFusion (CVE-2010-2861) to read the password.properties file, bypass authentication, and achieve remote code execution by scheduling a malicious task.
Description
Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/.
Exploits (4)
This Metasploit module exploits a directory traversal vulnerability in Adobe ColdFusion (CVE-2010-2861) to read the password.properties file, bypass authentication, and achieve remote code execution by scheduling a malicious task.
This exploit leverages a directory traversal vulnerability in Adobe ColdFusion to read arbitrary files by manipulating the 'locale' parameter in POST requests. It attempts multiple admin page filenames to bypass restrictions and retrieves file contents via HTTP responses.
This repository contains a functional Python 3 port of the CVE-2010-2861 ColdFusion directory traversal exploit. The script sends crafted HTTP POST requests to vulnerable ColdFusion endpoints, leveraging a null-byte injection in the 'locale' parameter to read arbitrary files, such as password.properties.
This Metasploit module exploits a directory traversal vulnerability in Adobe ColdFusion via the 'locale' parameter to retrieve sensitive files like password.properties. It includes fingerprinting to identify vulnerable versions and OS-specific traversal paths.
Nuclei Templates (1)
http.component:"Adobe ColdFusion" || http.component:"adobe coldfusion" || http.title:"coldfusion administrator login" || cpe:"cpe:2.3:a:adobe:coldfusion"
title="coldfusion administrator login" || app="adobe-coldfusion"
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H