CVE-2019-14222 PoC — Alfresco Software Alfresco Community Edition 加密问题漏洞

Source

https://github.com/mbadanoiu/CVE-2019-14222

Associated Vulnerability

Title:Alfresco Software Alfresco Community Edition 加密问题漏洞 (CVE-2019-14222)
Description:Alfresco Software Alfresco Community Edition是美国Alfresco Software公司的一套开源的企业内容管理系统的社区版。该系统包括文档管理、办公协作等功能。 Alfresco Software Alfresco Community Edition 6.0及之前版本中存在加密问题漏洞，该漏洞源于在默认安装中，程序会带有默认的私钥。攻击者可借助该私钥利用该漏洞获取有关目标系统的信息（OS类型、系统文件的位置、Java版本、Solr等）。

Description

 CVE-2019-14222: Default Certificate in Alfresco Community

Readme

# CVE-2019-14222: Default Certificate in Alfresco Community

Alfresco Community 5.x and below ships by default with a set of known private certificates. Anyone who downloads and installs the Alfresco Community software on a local machine gets access to these files.

Once obtained, these private keys can be used to:
- Gain access to Solr (which uses x509 certificate authentication)
- Launch active MITM attacks using a trusted Alfresco Certificate
- Launch passive decryption attacks if Non-Ephemeral ciphers are used

### NVD Disclosure:

The disclosure for this vulnerability can be found [here](https://nvd.nist.gov/vuln/detail/CVE-2019-14222).

### Requirements:

This vulnerability requires:
<br/>
- That the Alfresco appliaction uses the default SSL/TLS certificates

### Proof Of Concept:

More details and the exploitation process can be found in this [PDF](https://github.com/mbadanoiu/CVE-2019-14222/blob/main/Alfresco%20-%20CVE-2019-14222.pdf).

File Snapshot


 [4.0K]  /data/pocs/54abca4ca9032da5b2d053fe9a557d0ab81ed862
├── [1.3M]  Alfresco - CVE-2019-14222.pdf
└── [ 958]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!