CVE-2024-12356 PoC — BeyondTrust Remote Support和BeyondTrust Privileged Remote Access 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-12356.yaml

Associated Vulnerability

Title:BeyondTrust Remote Support和BeyondTrust Privileged Remote Access 安全漏洞 (CVE-2024-12356)
Description:BeyondTrust Remote Support和BeyondTrust Privileged Remote Access（BeyondTrust PRA）都是美国BeyondTrust公司的产品。BeyondTrust Remote Support是一个适用于 Windows、Mac、Linux、Ios（iPad、iPhone）等的远程桌面访问、服务台和协作软件。BeyondTrust Privileged Remote Access是一款特权远程访问软件。 BeyondTrust Remote S

Description

A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

File Snapshot


 id: CVE-2024-12356

info:
  name: Privileged Remote Access & Remote Support - Command Injection
  au

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!