启明星辰-4A统一安全管控平台 /accountApi/getMaster.do 信息泄露漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/ibaiw/2023Hvv/blob/main/%E5%90%AF%E6%98%8E%E6%98%9F%E8%BE%B0-4A%20%E7%BB%9F%E4%B8%80%E5%AE%89%E5%85%A8%E7%AE%A1%E6%8E%A7%E5%B9%B3%E5%8F%B0%20getMater%20%E4%BF%A1%E6%81%AF%E6%B3%84%E6%BC%8F.md
• https://www.ddpoc.com/DVB-2023-4906.html
• https://github.com/luck-ying/Library-POC/blob/master/2023HW/2023.8.14/%E5%90%AF%E6%98%8E%E6%98%9F%E8%BE%B04A%E7%BB%9F%E4%B8%80%E5%AE%89%E5%85%A8%E7%AE%A1%E6%8E%A7%E5%B9%B3%E5%8F%B0getMaster.do%E4%BF%A1%E6%81%AF%E6%B3%84%E6%BC%8F%E6%BC%8F%E6%B4%9E.py
• https://www.venustech.com.cn/new_type/4Aglpt/
• https://peiqi.wgpsec.org/dynamic/
• https://www.cnblogs.com/dxmao/articles/17674294.html
• https://cloud.tencent.com/developer/article/2326775
• https://cn-sec.com/archives/2604438.html
• https://www.duoweizhe.com/dwz_ldfx/65.html
• https://github.com/xiaozhi66666/vuepressblog
• https://deded.de/archives/5359689b-fec7-4827-b182-aed16a55f736
• https://t.me/s/Cybersec_threat?before=102
• https://gist.github.com/akkuman/61d9c82ba250c83f05e1b1c9d35e27be

Related Vulnerabilities

• PoCvenustech-4a-gtmaster-disclosure: 启明星辰-4A 统一安全管控平台 getMater 信息泄漏
• 启明星辰零信任SDP 任意文件读取漏洞
• 启明星辰天青汉马 download 任意文件读取漏洞
• 启明星辰天清汉马VPN /vpn/user/download/client 目录遍历漏洞
• 启明星辰天清汉马VPN /vpn/user/download/client 任意文件读取漏洞
• 启明星辰天清汉马USG防火墙存在弱口令漏洞
• 启明星辰天清汉马USG防火墙存在逻辑缺陷漏洞
• 启明星辰 4A 统一安全管控平台 accountApi/getMaster.do 文件信息泄露漏洞
• 启明星辰-4A 统一安全管控平台 getMater 信息泄漏
• 启明星辰VPN文件读取
• PoC启明星辰天玥网络安全审计系统SQL注入漏洞