Technical Advisory: Adobe ColdFusion WDDX Deserialization Gadgets

Multiple vulnerabilities identified in Adobe ColdFusion allow an unauthenticated attacker to obtain the service account NTLM password hash, verify the existence of a file or directory on the underlying operating system, and configure central config server settings.

account adobe adobe coldfusion advisory attacker coldfusion deserialization directory file gadgets hash ntlm operating system password server service service account settings system technical technical advisories technical advisory unauthenticated verify vulnerabilities vulnerability research