CVE-2019-1619

This repository contains a PowerShell script that automates the generation of a token required to exploit CVE-2019-1619, an authentication bypass vulnerability in Cisco Data Center Network Manager (DCNM). The script constructs a token using a timestamp, session ID, and a hardcoded secret key, which can then be used to bypass authentication.

This Metasploit module exploits CVE-2019-1619, an authentication bypass vulnerability in Cisco Data Center Network Manager (DCNM), to achieve unauthenticated remote code execution by uploading a malicious WAR file to the Apache Tomcat webapps directory. It also leverages CVE-2019-1622 for information disclosure to determine the correct upload path.

This Metasploit module exploits an unauthenticated file download vulnerability in Cisco Data Center Network Manager (DCNM) by abusing the `/fm/downloadServlet` endpoint to retrieve arbitrary files as root. It includes authentication bypass techniques for versions 10.4(2) and 11.1(1), while version 11.0(1) requires valid credentials.