Exploitation Summary
EIP tracks 2 public exploits for CVE-2023-3897. PoCs published by Jonas Benjamin Friedli, jFriedli.
AI-analyzed exploit summary This exploit bypasses CAPTCHA to enumerate valid users in SureMDM On-premise versions <= 6.31 by sending POST requests to the ForgotPassword endpoint and checking for a specific error message.
Description
Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version
Exploits (2)
This exploit bypasses CAPTCHA to enumerate valid users in SureMDM On-premise versions <= 6.31 by sending POST requests to the ForgotPassword endpoint and checking for a specific error message.
The repository contains a functional Python script that exploits CVE-2023-3897, a CAPTCHA bypass vulnerability in SureMDM On-premise versions <= 6.31, allowing user enumeration via error messages. The exploit sends POST requests to a specific endpoint and checks for a response indicating whether a user exists.
References (2)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L