CVE-2020-10145
27.05.2021, 21:15
The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, such as C:\ColdFusion2021\. By default, unprivileged users can create files in this directory structure, which creates a privilege-escalation vulnerability.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| adobe | coldfusion | 2021 | CNA |
| adobe | coldfusion | 2018 | CNA |
| adobe | coldfusion | 2016 | CNA |
Common Weakness Enumeration