cve/2020/CVE-2020-7115.md

CVE-2020-7115

Description

The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker could then execute an exploit that would allow to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher.

POC

Reference

• http://packetstormsecurity.com/files/158368/ClearPass-Policy-Manager-Unauthenticated-Remote-Command-Execution.html
• http://packetstormsecurity.com/files/158368/ClearPass-Policy-Manager-Unauthenticated-Remote-Command-Execution.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Live-Hack-CVE/CVE-2020-7115
• https://github.com/Retr02332/CVE-2020-7115
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/soosmile/POC