Exploitation Summary
EIP tracks 2 public exploits for CVE-2019-25066.
PoCs published by Jeremy Brown, Jeremy Brown, Onur ER <[email protected]>, including Metasploit module exploits/unix/webapp/ajenti_auth_username_cmd_injection.
AI-analyzed exploit summary This exploit leverages a command injection vulnerability in Ajenti's authentication mechanism by embedding shell commands in the JSON username field, leading to remote code execution. It demonstrates both direct command execution and a reverse shell via cron job manipulation.
Description
A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. The manipulation leads to privilege escalation. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.1.32 is able to address this issue. The name of the patch is 7aa146b724e0e20cfee2c71ca78fafbf53a8767c. It is recommended to upgrade the affected component.
Exploits (2)
This exploit leverages a command injection vulnerability in Ajenti's authentication mechanism by embedding shell commands in the JSON username field, leading to remote code execution. It demonstrates both direct command execution and a reverse shell via cron job manipulation.
This Metasploit module exploits a command injection vulnerability in Ajenti 2.1.31 by injecting a Python payload into the username parameter during authentication. It leverages the API endpoint `/api/core/auth` to execute arbitrary commands, resulting in remote code execution.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L