CVE-2021-31581 PoC — Akkadian Provisioning Manager 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31581.yaml

Associated Vulnerability

Title:Akkadian Provisioning Manager 安全漏洞 (CVE-2021-31581)
Description:Akkadian Provisioning Manager是美国Akkadian公司的一种配置解决方案，用于更强大的供应自动化的新集成。 Akkadian Provisioning Manager Engine (PME)存在安全漏洞，该漏洞允许未经授权的攻击者可对受影响设备的根级shell访问。

Description

Akkadian Provisioning Manager is susceptible to information disclosure. The restricted shell provided can be escaped by abusing the Edit MySQL Configuration command. This command launches a standard VI editor interface which can then be escaped.

File Snapshot


 id: CVE-2021-31581

info:
  name: Akkadian Provisioning Manager - Information Disclosure
  author: g

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!