CVE-2017-7284

HIGH
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2017-7284 has a selected CVSS score of 8.8 (high); EIP currently links 1 curated repository PoC.

Description

An attacker that has hijacked a Unitrends Enterprise Backup (before 9.1.2) web server session can leverage api/includes/users.php to change the password of the logged in account without knowing the current password. This allows for an account takeover.

Description source: CVE List

Exploitation context

Available material

Curated repository PoCs
1

Proofs of concept

1

Curated repository PoCs

GitHubCVE-2017-7284Curated repository PoCby RhinoSecurityLabs905Not analyzed3 files

Python · 143.6 KiB

GitHub
PoC details

References

2