Showing 1 - 2 of 2

Files from Shir Tamari

First Active	2021-10-28
Last Active	2021-11-10

Microsoft OMI Management Interface Authentication Bypass: Posted Nov 10, 2021; Authored by Spencer McIntyre, Nir Ohfeld, Shir Tamari | Site metasploit.com; This Metasploit module demonstrates that by removing the authentication exchange, an attacker can issue requests to the local OMI management socket that will cause it to execute an operating system command as the root user. This vulnerability was patched in OMI version 1.6.8-1 (released September 8th 2021).; tags | exploit, local, root; advisories | CVE-2021-38648; SHA-256 | 421ae743686547f1ecd98e3086fa9370482e6a9646a5f30c18b32491b7848309; Download | Favorite | View

Microsoft OMI Management Interface Authentication Bypass: Posted Oct 28, 2021; Authored by Spencer McIntyre, wvu, Nir Ohfeld, Shir Tamari | Site metasploit.com; By removing the authentication header, an attacker can issue an HTTP request to the OMI management endpoint that will cause it to execute an operating system command as the root user. This vulnerability was patched in OMI version 1.6.8-1 (released September 8th 2021).; tags | exploit, web, root; advisories | CVE-2021-38647; SHA-256 | fdef0aef0e912b6be1749a8d91235a8ce5f95d8c64ee36efaa66917951a81206; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days