POC Details: bf9e9ccd773c99d7ba724202e2fd4dffa8f0c7ba

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/enumeration/perforce-user-enum.yaml

Associated Vulnerability

Likely 0-day

Description

Detected Perforce server allowed anonymous user listing due to run.users.authorize being set to 0 (the default). The server returned a full list of users including usernames, email addresses, and full names without authentication. Both ASCII and Unicode server modes were affected. SSL-enforcing servers are not affected.

File Snapshot


 id: perforce-user-enumeration

info:
  name: Perforce Server - User Enumeration
  author: Morgan Rob

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.