CVE-2024-20419 PoC — Cisco Smart Software Manager On-Prem 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20419.yaml

Associated Vulnerability

Title:Cisco Smart Software Manager On-Prem 安全漏洞 (CVE-2024-20419)
Description:Cisco Smart Software Manager On-Prem（Cisco SSM On-Prem）是美国思科（Cisco）公司的一款用于Cisco产品许可证管理的组件。 Cisco Smart Software Manager On-Prem 存在安全漏洞，该漏洞源于密码更改过程实施不当。

Description

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process.

File Snapshot


 id: CVE-2024-20419

info:
  name: Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover
  

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!