Description
思科智能软件管理On-Prem身份验证系统漏洞，允许未经认证攻击者修改任意用户密码。
思科智能软件管理On-Prem /backend/settings/oauth_adfs?hostname=polar 权限绕过漏洞（CVE-2024-20419）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-auth-sLw3uhUy
https://nvd.nist.gov/vuln/detail/CVE-2024-20419
https://www.tenable.com/blog/cve-2024-20419-cisco-smart-software-manager-on-prem-password-change-vulnerability
https://www.exploit-db.com/exploits/52155
https://www.0xpolar.com/blog/CVE-2024-20419
https://cybersecuritynews.com/cisco-ssm-password-change-vulnerability/
https://www.rapid7.com/db/modules/auxiliary/admin/http/cisco_ssm_onprem_account/
https://www.anquanke.com/post/id/298030
https://www.ithome.com.tw/news/164005
https://arcticwolf.com/resources/blog/cve-2024-20401-and-cve-2024-20419/