wwoolwine-r7 (8)

Last Login: May 14, 2020
Assessments
3
Score
8

wwoolwine-r7's Latest (3) Contributions

Sort by:
Filter by:
1
Ratings
  • Attacker Value
    Very Low
  • Exploitability
    Very Low
Vulnerable in default configurationDifficult to weaponizeNo useful access
Technical Analysis

There doesn’t seem to be much value for an attacker to terminate a web service.

1
Ratings
  • Attacker Value
    Medium
  • Exploitability
    Medium
Gives privileged accessUnauthenticatedVulnerable in uncommon configuration
Technical Analysis

This doesn’t seem like that hard of an exploit to pull off, but the configuration must be local without 2fa. Seems like a bit of an edge case. Could see automated scanning + bitcoin or some such implant.

3
Ratings
  • Attacker Value
    Low
  • Exploitability
    Very High
Vulnerable in default configurationAuthenticated
Technical Analysis

Being an authenticated exploit, it’s certainly of less value to an attacker. Could be used in a privilege escalation context.