{"uuid": "043cbd7c-1e35-4cb0-974a-b78256b8aebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-20767", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/coldfusion_pms_servlet_file_read.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"ma4ter\", \"yoryio\", \"Christiaan Beek\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits an Improper Access Vulnerability in Adobe Coldfusion versions prior to version\\n          '2023 Update 6' and '2021 Update 12'. The vulnerability allows unauthenticated attackers to request authentication\\n          token in the form of a UUID from the /CFIDE/adminapi/_servermanager/servermanager.cfc endpoint. Using that\\n          UUID attackers can hit the /pms endpoint in order to exploit the Arbitrary File Read Vulnerability.\", \"disclosure_date\": \"2024-03-12\", \"fullname\": \"auxiliary/gather/coldfusion_pms_servlet_file_read\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"CVE-2024-20767 - Adobe Coldfusion Arbitrary File Read\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/gather/coldfusion_pms_servlet_file_read.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/coldfusion_pms_servlet_file_read\", \"references\": [\"CVE-2024-20767\", \"EDB-52387\", \"URL-https://helpx.adobe.com/security/products/coldfusion/apsb24-14.html\", \"URL-https://jeva.cc/2973.html\"], \"rport\": 8500, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:12.765123Z"}