SID 1:25976

Rule Category

POLICY-OTHER --

Alert Message

POLICY-OTHER Adobe ColdFusion admin API access attempt

Rule Explanation

This rule looks for an HTTP request sent to the /CFIDE/adminapi endpoint.

What To Look For

This rule alerts on an attempt to access the Adobe ColdFusion admin API.

Known Usage

No public information

False Positives

Known false positives, with the described conditions

This rule fires on any attempt to access the sensitive "/CFIDE/adminapi" (Admin API) endpoint on Adobe ColdFusion web servers.

Contributors

Cisco Talos Intelligence Group