CVE-2024-44760

EUVD-2024-41093 · Published Aug 28, 2024

Incorrect access control in the component /servlet/SnoopServlet of Shenzhou News Union Enterprise Management System v5.0 through v18.8 allows attackers to access sensitive information regarding the server.

Technologies

Sunmochina Enterprise Management System

Weaknesses

NVD-CWE-OtherCWE-276

CVSS scores

v3.17.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Execution Stealth Discovery

T1190Exploit Public-Facing Application T1083File and Directory Discovery T1574.010Services File Permissions Weakness

References

https://github.com/WarmBrew/web_vul/blob/main/SunmoEMS/SunmoEMS-info.md
https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-44760.md

Potentially impacted assets

See if this affects your attack surface