cve/2024/CVE-2024-36042.md

CVE-2024-36042

Description

Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthenticated user with superadmin access.

POC

Reference

No PoCs from references.

Github

• https://github.com/Esther7171/TryHackMe-Walkthroughs
• https://github.com/KarimLedesmaHaron/THM-Tutoriales
• https://github.com/oska45/Penetration-Testing-of-Multiple-Machines
• https://github.com/w3workerz/THM-Walkthroughs
• https://github.com/zaaraZiof0/CVE-2024-36042