漏洞描述
Array Services守护程序(arrayd)的默认配置使认证失效，远程用户可以获得根特权。
Array Services守护程序权限许可漏洞
PoC代码
暂无相关漏洞推荐
- 金蝶云星空 /Kingdee.BOS.WebApi.ServicesStub.AuthService.ValidateLoginInfo.common.kdsvc 命令执行漏洞
- POC CVE-2025-61757: Oracle Identity Manager REST WebServices - Authentication Bypass
- （CVE-2025-61757）Oracle Identity Manager REST WebServices远程接管漏洞
- CVE-2019-6340: Drupal 8 core RESTful Web Services RCE
- POC CVE-2020-0618: Microsoft SQL Server Reporting Services - Remote Code Execution
- POC CVE-2021-24335: WordPress Car Repair Services & Auto Mechanic Theme <4.0 - Cross-Site Scripting
- POC CVE-2021-44529: Ivanti EPM Cloud Services Appliance Code Injection
- POC CVE-2023-34124: SonicWall GMS and Analytics Web Services - Shell Injection
- POC CVE-2023-3722: Avaya Aura Device Services - OS Command Injection
- POC CVE-2024-0713: Monitorr Services Configuration - Arbitrary File Upload
- POC CVE-2024-8963: Ivanti Cloud Services Appliance - Path Traversal
- POC azure-keyvault-trusted-ms-unrestricted: Key Vault Trusted Microsoft Services Access Not Configured
- POC azure-postgres-allow-azure-services-disabled: Azure PostgreSQL Access From Azure Services Disabled