CVE-2019-16097 PoC — Harbor 权限许可和访问控制问题漏洞

Source

https://github.com/dacade/cve-2019-16097

Associated Vulnerability

Title:Harbor 权限许可和访问控制问题漏洞 (CVE-2019-16097)
Description:Harbor是一款开源的可信云本机注册表。该产品主要用于存储、签名和扫描容器映像以查找漏洞。 Harbor 1.7.0版本至1.8.2版本中的core/api/user.go文件存在权限许可和访问控制问题漏洞。攻击者可利用该漏洞创建admin账户。

Description

cve-2019-1609

Readme

# cve-2019-16097

1.在urls.txt中添加你要检测的url

2.python3环境下运行cve-2019-16097脚本
python3 cve-2019-16097.py

3.批量检测完成后再results中查看成功写入账号的url。

File Snapshot


 [4.0K]  /data/pocs/39ef8066836dbede1648e0ddc60ec3b6ccdd5648
├── [1.2K]  cve-2019-16097.py
├── [ 202]  README.md
├── [   0]  results.txt
└── [  83]  urls.txt

0 directories, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!