CVE-2010-5290

CVE-2010-5290 describes a critical authentication bypass vulnerability in Adobe ColdFusion versions prior to 10. Attackers with read access to the configuration file could gain administrative privileges without needing the cleartext password, as the system would authenticate based solely on the password hash. This vulnerability carries a CVSS score of 10.0, indicating a severe risk with network-based attacks, low complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.