Exploitation Summary
EIP tracks 2 public exploits for CVE-2017-16921. PoCs published by Bæln0rn, Smarttfoxx.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in OTRS by manipulating PGP configuration parameters to execute arbitrary shell commands. The PoC demonstrates a reverse Python shell, allowing remote command execution under the web server user's permissions.
Description
In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged into OTRS as an agent can manipulate form parameters (related to PGP) and execute arbitrary shell commands with the permissions of the OTRS or web server user.
Exploits (2)
This exploit leverages a command injection vulnerability in OTRS by manipulating PGP configuration parameters to execute arbitrary shell commands. The PoC demonstrates a reverse Python shell, allowing remote command execution under the web server user's permissions.
This is a functional exploit for CVE-2017-16921, targeting OTRS versions 4.0.1-6.0.1. It authenticates as an agent, manipulates PGP configuration to inject a reverse shell payload, and triggers execution via the AdminPGP interface.
References (5)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H