Lucee on existing LAMP server

[Zedicus]

Don’t forget to tell us about your stack!

OS: Debian 11
Java Version: 11
Tomcat Version: included
Lucee Version: 5.3.5.92

installed on an already running multi-site enabled Apache2 LAMP server. the /var/www/html folder will load a index.cfm file but when i try to browse to http://ipaddress/lucee/admin/server.cfm
i get this.

this is the http://ipaddress/index.cfm

(new user image removed)

i know nothing about Lucee, Tomcat, or ColdFusion, i have a backed up website that i am trying to get running and i have this server available. i can post logs if you tell me what log is relevant.

thanks for your time.

[Zedicus]

this server is entirely headless. i need to be able to access this VIA IP or domain name. i will not be able to ever use http://localhost/lucee/admin/web.cfm on this server.

is that my problem?
how do i enable this?

of note: the server ‘works’ and my cfm pages are actually viewable in a browser. i need the admin portal to connect to a SQL instance for this page though.

also: identical results with or with out :8888 in the address.

[andreas]

This was mostly happening/reported with Lucee 5.4.3.2 with Linux and should have been corrected with 5.4.3.4 see Lucee Critical Security Alert, August 15th, 2023 - CVE-2023-38693 - #34 by Zackster. Not sure if this is now s regression. Does it affect only the Overview page in the Lucee sdnin?

[Zedicus]

@andreas

Does it affect only the Overview page in the Lucee sdnin?

clicking ANYTHING returns me to the login page.
logging in takes me to the ERROR page shown.

same issue using web.cfm or server.cfm

[andreas]

Can you try removing all session cookies?

[andreas]

Try also this:

Lucee Critical Security Alert, August 15th, 2023 - CVE-2023-38693

Additionally, after seeing a thread on Slack by @dswitzer, who had issues within the Lucee Administrator (not being able to load certain administrator pages), I can confirm that I had a similar issue on test upgrades in Ubuntu (it might be the same on Windows): The Lucee Administrator were not fully deployed when upgrading with the full lucee-5.4.3.2.jar. If you are finding the same issues, you might need to do the following: ATTENTION: Make a backup of your Administrator Settings first. This …

[Zedicus]

@andreas

Can you try removing all session cookies?

did
things i have tried this morning
installing a wm and browser on the server = same results using :8888 or not
on the local server tried. new browser cleaned everything each time. this server had no WM till just now.
http://127.0.0.1:8888/lucee/admin/server.cfm = same result
http://127.0.0.1/lucee/admin/server.cfm = same result
http://localhost:8888/lucee/admin/server.cfm = same result
http://localhost/lucee/admin/server.cfm = same result

seems to me like lucee is not able to get the stuff for the pages. i have done the install with ROOT as the tomcat user and with www-data as the tomcat user (both should have full access to my /var/www)

same results both ways

[Zedicus]

@andreas

Try also this:

hollypoop

can i just install an older version or the 6.0 RC?

figures the one day i would try using lucee there would be a show stopper bug?

[andreas]

@Zedicus I’ve misread your version. Have you read the entire thread?

Lucee Critical Security Alert, August 15th, 2023 - CVE-2023-38693

The Lucee team received a responsible disclosure for a security vulnerability which affects all previous releases of Lucee. [image] After reviewing the report and confirming the vulnerability, the Lucee team then conducted a further security review and found additional vulnerabilities which have been addressed as part of this security update. Latest Stable Releases 5.4.3.2 (recommended) 5.3.12.1 Backported Stable Releases In addition, as we are aware that some Lucee users have not yet upgr…

Please try one of the fixed versions .

[Zedicus]

@andreas

Please try one of the fixed versions .

i just double checked and i am on 5.4.3.2 now. and i was when i loaded the server with the local browser and tried it. all with the same issue.

i cleaned out all the WEB-INF folders and everything during the last install also.

[andreas]

As I linked above 5.4.3.4 is a Snapshot that fixes the admin issue of 5.4.3.2 Please try that one.

[Zedicus]

@andreas

As I linked above

yes i will, i was just showing that i think i went from one bad version to another bad version. Thank you for your help, i will try the recommended one and report back later today.

thanks again

[Zedicus]

@andreas

As I linked above 5.4.3.4 is a Snapshot that fixes the admin issue of 5.4.3.2 Please try that one.

i clean installed with the 5.4.2.17 installer and everything is working. i was able to get to the admin portal and connect my database. all is well.

THANK YOU !!