crazywhalecc/POC00
1
0
Fork 0
mirror of https://github.com/wooluo/POC00.git synced 2026-07-02 18:15:34 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update JumpServer未授权漏洞.md

Browse Source
This commit is contained in:
wy876
2023-10-26 20:28:27 +08:00
committed by GitHub
parent d74d5d03d2
commit c95c75f5d6
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
JumpServer未授权漏洞.md
View File

@@ -5,7 +5,10 @@
3.6.0 <= JumpServer <= 3.6.3
## fofa
```
icon_hash="-1162630024"
```
## POC
JumpServer 是一款开源的堡垒机。 在JumpServer受影响版本中，由于/api/v1/terminal/sessions/接口没有添加权限认证，未授权的攻击者可以通过访问/api/v1/terminal/sessions/?limit=1，获取堡垒机terminal的session信息