大汉网络 /jcms/interface/ldap/receive.jsp 接口未授权更改密钥

Follow 0

Basic Fields

SSV ID:: SSV-90248

Find Time:: Unknown

Submit Time:: 2016-01-09

Level:

Category:: 越权访问

Component:: JCMS(Hanweb)
Hanweb JIS
Hanweb JVIDEO
Hanweb JSEARCH
Hanweb ZFXXGKXT

Author:: Unknown

Submitter:: 皮皮

CVE-ID：: Add

CNNVD-ID：: Add

CNVD-ID：: Add

ZoomEye Dork：: Add

Source

Detail

Contributor 皮皮 Got 3.05KB

etc 14 exchange

PoC (pocsuite 插件) (pocsuite 插件)

Contributor 皮皮 totally have 1.5KB

Login to exchange

have 1 Exchange

Reference Linking

http://www.wooyun.org/bugs/wooyun-2015-0143528

Solutions

Temp Solutions

Unavailable Temp Solutions

Official Solution

Unavailable Official solution

Defense Solutions

Unavailable Defense Solutions

Unavailable Comments

※Any content provided by this site, only to learn the code and services, not for illegal purposes