CVE-2010-0185

The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain collection metadata, search information, and index data via a request to an unspecified URL.
Severity
UNKNOWN
AV:N/AC:L/Au:N/C:P/I:N/A:N
Atk. Vector
NETWORK
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
VendorProductVersion
adobecoldfusion
9.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://kb2.adobe.com/cps/807/cpsid_80719.html
http://osvdb.org/62037
http://secunia.com/advisories/38387
http://www.adobe.com/support/security/bulletins/apsb10-04.html
http://www.securityfocus.com/bid/38007
http://www.securitytracker.com/id?1023519
http://www.vupen.com/english/advisories/2010/0259
https://exchange.xforce.ibmcloud.com/vulnerabilities/55997
http://kb2.adobe.com/cps/807/cpsid_80719.html
http://osvdb.org/62037
http://secunia.com/advisories/38387
http://www.adobe.com/support/security/bulletins/apsb10-04.html
http://www.securityfocus.com/bid/38007
http://www.securitytracker.com/id?1023519
http://www.vupen.com/english/advisories/2010/0259
https://exchange.xforce.ibmcloud.com/vulnerabilities/55997