CVE-2021-47718
HIGHOpenBMCS 2.4 - Unauthenticated Information Disclosure via Directory Listing
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47718. PoCs published by LiquidWorm.
AI-analyzed exploit summary The document describes an information disclosure vulnerability in OpenBMCS 2.4, where directory listing is enabled on the '/debug/' endpoint, exposing sensitive files. This could allow an attacker to gain full BMS access by leveraging the disclosed information.
Description
OpenBMCS 2.4 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive files by exploiting directory listing functionality. Attackers can browse directories like /debug/ and /php/ to discover configuration files, database credentials, and system information.
Exploits (1)
The document describes an information disclosure vulnerability in OpenBMCS 2.4, where directory listing is enabled on the '/debug/' endpoint, exposing sensitive files. This could allow an attacker to gain full BMS access by leveraging the disclosed information.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N