chef-cft/inspec_cve_2019_15224

PoC

Example InSpec profile to detect presence of a malicious rest-client gem (CVE-2019-15224)

view exploit source poc_in_githubauthor chef-cftpublished 2019-08-23catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-15224US	critical9.8	3.55% (89th)	Exploit	2019-08-19
The rest-client gem 1.6.10 through 1.6.13 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions <=1.6.9 and >=1.6.14 are…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.