CVE-2022-34298 PoC — OpenAM 安全漏洞

Source

https://github.com/watchtowrlabs/CVE-2022-34298

Associated Vulnerability

Title:OpenAM 安全漏洞 (CVE-2022-34298)
Description:OpenAM (开源版)是一套开源的单点登录框架。该产品通过提供核心的标识服务（Core Server）以实现在一个网络架构中的透明单点登录（如集中式、分布式的单点登录）。 OpenAM 存在安全漏洞，该漏洞源于OpenAM 14.6.6 之前的 NT auth 模块允许替换 Samba 用户名攻击。

Description

PoC exploit for CVE-2022-34298, OpenAM authentication bypass

File Snapshot


 [4.0K]  /data/pocs/b59d32423e8227bc32116ba39725fc620542f142
└── [5.9K]  watchtowr-vs-openam_auth-impersonation_2022-06-16.py

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!