CVE-2017-9979

概要

参考情報

• packetstormsecurity.com/files/143780/OSNEXUS-QuantaStor-4-Information-Disclosure.html · Exploit
• seclists.org/fulldisclosure/2017/Aug/23 · Exploit
• vvvsecurity.com/advisories/vvvsecurity-advisory-2017-6943.txt · Exploit
• exploit-db.com/exploits/42517 · Exploit

quantastor のその他の脆弱性

• CVE-2021-4406高 7.2An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC * go to the alert manager * open the ITS…
• CVE-2021-42083中 5.4An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC * go to the alert manager * open the ITS…
• CVE-2021-42082高 7.8Local users are able to execute scripts under root privileges. POC On the local host run the following command: curl 'localhost:8154/qsto…
• CVE-2021-42081高 7.2An authenticated administrator is allowed to remotely execute arbitrary shell commands via the API. POC http://<IP_ADDRESS>/qstorapi/storag…
• CVE-2021-42080高 7.4An attacker is able to launch a Reflected XSS attack using a crafted URL. POC: Visit the following URL https://<IPADDRESS>:8153/qstorapi/e…