CVE-2020-11547 PoC — Paessler PRTG Network Monitor 信息泄露漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11547.yaml

Associated Vulnerability

Title:Paessler PRTG Network Monitor 信息泄露漏洞 (CVE-2020-11547)
Description:Paessler PRTG Network Monitor是德国Paessler公司的一款全功能网络监控管理软件。 Paessler PRTG Network Monitor 20.1.57.1745之前版本中存在安全漏洞。远程攻击者可借助HTTP请求利用该漏洞获取有关正在运行的探针或服务器本身的信息（CPU使用率，内存，Windows版本和内部统计信息）。

Description

PRTG Network Monitor before 20.1.57.1745 is susceptible to information disclosure. An attacker can obtain information about probes running or the server itself via an HTTP request, thus potentially being able to modify data and/or execute unauthorized administrative operations in the context of the affected site.

File Snapshot


 id: CVE-2020-11547

info:
  name: PRTG Network Monitor <20.1.57.1745 - Information Disclosure
  auth

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!