Reads ColdFusion's password.properties file through locale parameter traversal on the administrator console.
Is your app exploitable through CVE-2010-2861?