Description
2021攻防演习期间，浪潮ClusterEngineV4.0 被爆存在任意用户登录漏洞和远程命令执行漏洞，构造恶意的用户名和密码即可获取后台权限。
浪潮ClusterEngineV4.0 任意用户登录和远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/%E6%B5%AA%E6%BD%AEClusterEngineV4.0%20sysShell%20%E4%BB%BB%E6%84%8F%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
https://cn-sec.com/archives/tag/%E6%B5%AA%E6%BD%AE
https://cve.imfht.com/poc_detail/83fc71ba035b30634d136568ea0679a9ea990a45
https://blog.csdn.net/DUANYU23/article/details/115499280