CVE-2000-0649 detected on Connector
- Views:
- 118
- Visibility:
- Public
- Votes:
- 0
- Category:
- cloud-manager
- Specialty:
- bluexp
- Last Updated:
- 4/22/2024, 1:14:58 PM
Applies to
- BlueXP
- Connector
- CVE-2000-0649
Issue
CVE-2000-0649 detected on Connector running SM1 Patch with version 3.9.36/1.
Finding:
Web Server HTTP Header Internal IP Disclosure on ports 80 and 443.
Proof:
Nessus was able to exploit the issue using the following request :
GET //IgOo5nQ0.asp HTTP/1.0
Accept-Charset: iso-8859-1,utf-8;q=0.9,*;q=0.1
Accept-Language: en
Connection: Close
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
Pragma: no-cache
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
This produced the following truncated output (limited to 10 lines) :
------------------------------ snip ------------------------------
Date: Sun, 10 Mar 2024 14:15:19 GMT
Cache-Control: public,max-age=31536000
X-FRAME-Options: SAMEORIGIN
Location: https://10.5.20.4
Content-Length: 0
Server: Jetty(9.4.52.v20230823)
