CVE-2022-37298
CRITICALShinken Monitoring 2.4.3 - Improper Authentication via SafeUnpickler
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2022-37298. PoCs published by dbyio.
AI-analyzed exploit summary The repository contains a functional Python exploit for CVE-2022-37298, which leverages unsafe deserialization in Shinken Monitoring's SafeUnpickler class to achieve remote code execution (RCE). The exploit crafts a malicious pickle payload, compresses it, and sends it to the target server via the '/put-conf' endpoint.
Description
Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The SafeUnpickler class found in shinken/safepickle.py implements a weak authentication scheme when unserializing objects passed from monitoring nodes to the Shinken monitoring server.
Exploits (1)
The repository contains a functional Python exploit for CVE-2022-37298, which leverages unsafe deserialization in Shinken Monitoring's SafeUnpickler class to achieve remote code execution (RCE). The exploit crafts a malicious pickle payload, compresses it, and sends it to the target server via the '/put-conf' endpoint.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H