Published: 27/04/2017 Updated: 04/09/2020

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Adobe ColdFusion 2016 Update 3 and previous versions, ColdFusion 11 update 11 and previous versions, ColdFusion 10 Update 22 and previous versions have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe coldfusion 10.0
adobe coldfusion 11.0
adobe coldfusion 2016

# Exploit Title: Adobe Coldfusion BlazeDS Java Object Deserialization RCE # Date: February 6, 2018 # Exploit Author: Faisal Tameesh (@DreadSystems) # Company: Depth Security (depthsecuritycom) # Version: Adobe Coldfusion (11003292866) # Tested On: Windows 10 Enterprise (10015063) # CVE: CVE-2017-3066 # Advisory: helpxadobeco ...

Adobe Coldfusion version 11003292866 BlazeDS java object deserialization remote code execution exploit ...

The study of vulnerability CVE-2017-3066. Java deserialization

CVE-2017-3066 Description Adobe ColdFusion uses message format the Action (AMF) The AMF Protocol is a custom binary serialization Protocol It has two formats: AMF0 and AMF3 Action message consists of headers and bodies There are several implementations of AMF in different languages For Java we have Adobe BlazeDS (now Apache BlazeDS) which is also used in Adobe ColdFusion

Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12

ColdFusionPwn Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12 Description The tool allows you to generate serialized AMF-payloads to exploit the missing input validation of allowed classes For details see our blog post Install Get the latest version of ysoserial Get ColdFusionPwn from releases Usage java -cp ColdFusionPwn-001-SNAPSHOT-alljar:ysoseri

Web-Coldfusion-Vulnerability-POC PT-BR PAPER neste paper irei mostrar como explorar O CVE-2018–15961 e CVE-2017–3066 endpoints web server coldfusion: cfc, cfm, cfml e outros primeiro CVE: CVE-2018-15961** ############## entrypoint: /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/uploadcfm ############## reference exploit: githubcom/xbufu/CVE-2018-159

CWE-502 https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html http://www.securityfocus.com/bid/98003 http://www.securitytracker.com/id/1038364 https://www.exploit-db.com/exploits/43993/https://nvd.nist.gov https://www.exploit-db.com/exploits/43993/https://github.com/cucadili/CVE-2017-3066

CVE-2017-3066

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect