Podatność CVE-2016-6603

Podatność CVE-2016-6603

Publikacja: 2017-01-23 Modyfikacja: 2017-01-24

Opis:

	Tytuł	Autor	Data
Low	WebNMS Framework 5.2 SP1 Traversal / Weak Obfuscation / User Impersonation	agileinfosec	10.08.2016

Typ:

(Improper Input Validation)

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
5/10	2.9/10	10/10

Affected software
Zohocorp -> Webnms framework

http://packetstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.html

http://seclists.org/fulldisclosure/2016/Aug/54

http://www.securityfocus.com/archive/1/539159/100/0/threaded

http://www.securityfocus.com/bid/92402

https://blogs.securiteam.com/index.php/archives/2712

https://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them

https://github.com/pedrib/PoC/blob/master/advisories/webnms-5.2-sp1-pwn.txt

https://www.exploit-db.com/exploits/40229/