daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Enhancement: cves/2018/CVE-2018-12296.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-07-05 14:13:40 -04:00
parent 3307bc8035
commit b2d8370bc8
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
cves/2018/CVE-2018-12296.yaml
View File

@ -4,7 +4,7 @@ info:
name: Seagate NAS OS 4.3.15.1 - Server Information Disclosure name: Seagate NAS OS 4.3.15.1 - Server Information Disclosure
author: princechaddha author: princechaddha
severity: high severity: high
description: Insufficient access control in /api/external/7.0/system.System.get_infos in Seagate NAS OS version 4.3.15.1 allows attackers to obtain information about the NAS without authentication via empty POST requests. description: Seagate NAS OS version 4.3.15.1 has insufficient access control which allows attackers to obtain information about the NAS without authentication via empty POST requests in /api/external/7.0/system.System.get_infos.
reference: reference:
- https://blog.securityevaluators.com/invading-your-personal-cloud-ise-labs-exploits-the-seagate-stcr3000101-ecf89de2170 - https://blog.securityevaluators.com/invading-your-personal-cloud-ise-labs-exploits-the-seagate-stcr3000101-ecf89de2170
- https://nvd.nist.gov/vuln/detail/CVE-2018-12296 - https://nvd.nist.gov/vuln/detail/CVE-2018-12296
@ -36,3 +36,5 @@ requests:
group: 1 group: 1
regex: regex:
- '"version": "([0-9.]+)"' - '"version": "([0-9.]+)"'
# Enhanced by mp on 2022/07/05