CVE-2020-37104
HIGHASTPP 4.0.1 - Unauthenticated Sensitive Information Disclosure via Database Backup Download
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37104. PoCs published by Fabien AUNAY.
AI-analyzed exploit summary This exploit demonstrates an unauthenticated information disclosure vulnerability in ASTPP 4.0.1, where predictable database backup filenames allow attackers to download sensitive database backups via brute-forcing a 6-digit PIN.
Description
ASTPP 4.0.1 contains an information disclosure vulnerability that allows unauthenticated attackers to download database backup files by predicting backup filename patterns. Attackers can generate a list of 6-digit PIN combinations and fuzz the backup download URL to exfiltrate sensitive database information from the /database_backup/ directory.
Exploits (1)
This exploit demonstrates an unauthenticated information disclosure vulnerability in ASTPP 4.0.1, where predictable database backup filenames allow attackers to download sensitive database backups via brute-forcing a 6-digit PIN.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N