copethomas/datapower-redis-rce-exploit

PoC

A POC for IBM Datapower Authenticated Redis RCE Exploit abusing the Test Message Function (CVE-2020-5014)

view exploit source poc_in_githubauthor copethomaspublished 2020-10-18catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-5014US	medium6.7	0.87% (59th)	Exploit	2021-03-08
IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary code on the system using a server-side requesr forgery attack.…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.