CVE-2022-1162 PoC — GitLab Community Edition和GitLab Enterprise Edition 信任管理问题漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1162.yaml

Associated Vulnerability

Title:GitLab Community Edition和GitLab Enterprise Edition 信任管理问题漏洞 (CVE-2022-1162)
Description:GitLab Enterprise Edition是一套内容管理系统。GitLab Community Edition是美国GitLab公司的一种社区版 GitLab 。 GitLab Community Edition (CE) and Enterprise Edition (EE)存在信任管理问题漏洞，该漏洞由于基于 OmniAuth 的注册中的应用程序代码中存在硬编码凭据，因此存在该漏洞。未经身份验证的远程攻击者可以使用硬编码凭据访问受影响的系统。该漏洞允许远程攻击者获得对易受攻击系统的完全访问权限

Description

GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML), allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab without the need for an exploit by matching unique hashes for the application-<hash>.css file in the header for unauthenticated requests. Positive matches do not guarantee exploitability. Affected versions are 14.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2.

File Snapshot


 id: CVE-2022-1162

info:
  name: GitLab CE/EE - Hard-Coded Credentials
  author: GitLab Red Team
  s

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!