U.S. Dept Of Defense · Report #241116
Admin Salt Leakage on DoD site.
Validstatus
mediumseverity
7upvotes
2 Dec 2019disclosed
Summary
Adobe Cold Fusion Admin Salt Leakage was found on one of DoD domain. Team get it fixed well.
How it was found
Hi there, the login page located at https://█████████/████████/adminapi/administrator.cfc is leaking administrator salt which is required at authentication purpose.
#PoC:
Navigate to https://████/████████/adminapi/administrator.cfc?method=getSalt which will show you the admin salt ████████ which is required for further authentication.
#Impact: With help of salt and some other info an attacker easily bypass login by using simple hash cracking tools and get access to admin panel
#Fix: Direct access to getSalt method should be prohibited.
Let me know if any further info is required.
Regards, Mr_R3boot.