Description
Leostream远程桌面访问平台是一个厂商中立、可扩展的解决方案，能够实现安全、灵活的远程和混合工作环境，提供全面的管理、零信任安全性和跨多云、本地和各种操作系统的成本优化。leostream存在默认口令 admin/leo。攻击者可通过默认口令控制整个平台，使用管理员权限操作所有功能
Leostream / 默认口令漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://docs.leostream.com/v9/cb-9-security.pdf
https://leostream.com/wp-content/uploads/2018/11/leostream-administrators-guide.pdf
https://adepts.of0x.cc/Leostream-XSS-to-RCE/
https://support.leostream.com/support/solutions/articles/66000480280-changing-the-default-admin-password
https://labs.jumpsec.com/advisory-cve-2021-41550-leostream-connection-broker-authenticated-remote-code-execution/
https://app.opencve.io/cve/CVE-2021-38157
https://nvd.nist.gov/vuln/detail/CVE-2021-38157
https://www.cvedetails.com/version/1171409/Leostream-Connection-Broker-8.1.67.html