CVE-2018-9160
CRITICALSickRage < 2018.03.09-1 - Unprotected Credential Exposure via HTTP Response
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2018-9160.
PoCs published by Sven Fassbender, mechanico, Sven Fassbender, Shelby Pace, including Metasploit module auxiliary/scanner/http/http_sickrage_password_leak.
AI-analyzed exploit summary This exploit demonstrates an information leakage vulnerability in SickRage where clear-text credentials (e.g., GitHub, AniDB) are exposed in HTTP responses when no authentication is configured. The PoC fetches the credentials by parsing the HTML response from the `/config/general` endpoint.
Description
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.
Exploits (3)
This exploit demonstrates an information leakage vulnerability in SickRage where clear-text credentials (e.g., GitHub, AniDB) are exposed in HTTP responses when no authentication is configured. The PoC fetches the credentials by parsing the HTML response from the `/config/general` endpoint.
This PoC exploits CVE-2018-9160, an information leakage vulnerability in SickRage where clear-text credentials (e.g., GitHub) are exposed in HTTP responses. The script fetches the `/config/general` endpoint and parses the HTML to extract credentials from input fields.
This Metasploit module exploits an information leak vulnerability in SickRage to extract saved GitHub and other service credentials from HTTP responses. It checks for authentication and parses HTML to retrieve credentials from configuration pages.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H