Adobe ColdFusion Directory Traversal Vulnerability

Known Exploited Vulnerability

CVE-2010-2861, Adobe ColdFusion Directory Traversal Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.

The following remediation steps are recommended / required by April 15, 2022: Apply updates per vendor instructions.