s4mb4sh (2)

Last Login: August 11, 2024
Assessments
1
Score
2

s4mb4sh's Latest (2) Contributions

Sort by:
Filter by:
3

Check it out, Santander’s team investigation, analysed on fake SSH exploits POC.

https://santandersecurityresearch.github.io/blog/sshing_the_masses

1
Ratings
  • Attacker Value
    Medium
  • Exploitability
    High
Easy to weaponizeVulnerable in default configurationAuthenticated
Technical Analysis

This vulnerability also requires authentication, but any SharePoint user with Site Owner permissions can hit it. However, the default configuration of SharePoint allows authenticated users to create sites. That’s why I disagree with Microsoft’s CVSS rating here. By changing “Privileges Required” to low instead of high, it takes it from a 7.2 to (IMHO) more accurate 8.8

The POC disclosed shows up the easy exploitation despite to be authenticated.