CVE-2010-0185

Published Feb 3, 2010

Last updated 8 years ago

Overview

Description: The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain collection metadata, search information, and index data via a request to an unspecified URL.
Source: psirt@adobe.com
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-264

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "113431FB-E4BE-4416-800C-6B13AD1C0E92"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References