Update CVE-2020-11547.yaml

patch-1
Prince Chaddha 2021-09-02 18:25:16 +05:30 committed by GitHub
parent 5c94814e00
commit 3b32de60be
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 16 additions and 5 deletions

View File

@ -5,19 +5,30 @@ info:
author: x6263
severity: medium
description: PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself via an HTTP request.
reference: |
- https://nvd.nist.gov/vuln/detail/CVE-2020-11547
reference:
- https://github.com/ch-rigu/CVE-2020-11547--PRTG-Network-Monitor-Information-Disclosure
tags: cve,cve2020,network,prtg,information-disclosure
- https://nvd.nist.gov/vuln/detail/CVE-2020-11547
tags: cve,cve2020,prtg,disclosure
requests:
- method: GET
path:
- "{{BaseURL}}/public/login.htm?type=probes/"
- "{{BaseURL}}/public/login.htm?type=probes"
- "{{BaseURL}}/public/login.htm?type=requests"
req-condition: true
matchers-condition: and
matchers:
- type: dsl
dsl:
- "contains((body_1), 'Probe #1') && contains((body_2), '<span>Configuration Requests Sent</span>')"
part: body
- type: word
words:
- "Probe"
- "prtg_network_monitor"
part: body
- type: status
status:
- 200