Skip to content

Commit 66d657f

Browse files
authored
Merge pull request rapid7#19810 from h00die/fix_loadmaster_2024
Fix loadmaster privesc check method and refs
2 parents e9d4a9d + 79ac873 commit 66d657f

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

modules/exploits/linux/local/progress_kemp_loadmaster_sudo_privesc_2024.rb

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,8 @@ def initialize(info = {})
3232
'License' => MSF_LICENSE,
3333
'References' => [
3434
['URL', 'https://rhinosecuritylabs.com/research/cve-2024-1212unauthenticated-command-injection-in-progress-kemp-loadmaster/'],
35-
['URL', 'https://kemptechnologies.com/kemp-load-balancers']
35+
['URL', 'https://kemptechnologies.com/kemp-load-balancers'],
36+
['CVE', '2024-1212']
3637
],
3738
'DisclosureDate' => '2024-03-19',
3839
'Notes' => {
@@ -84,13 +85,12 @@ def initialize(info = {})
8485

8586
def check
8687
score = 0
87-
score += 1 if read_file('/usr/wui/index.js').include?('KEMP')
88-
score += 1 if read_file('/etc/motd').include?('Kemp LoadMaster')
89-
score += 1 if exists?('/usr/wui/eula.kemp.html')
90-
vprint_status("Found #{score} indicators this is a KEMP product")
91-
return CheckCode::Detected if score > 0
88+
score += 1 if file?('/usr/wui/index.js') && read_file('/usr/wui/index.js').include?('KEMP')
89+
score += 1 if file?('/etc/motd') && read_file('/etc/motd').include?('Kemp LoadMaster')
90+
score += 1 if file?('/usr/wui/eula.kemp.html')
91+
return CheckCode::Detected("Found #{score} indicators this is a KEMP product") if score > 0
9292

93-
return CheckCode::Safe
93+
CheckCode::Safe("Found #{score} indicators this is a KEMP product")
9494
end
9595

9696
def verify_copy(src, dest, elevate)

0 commit comments

Comments
 (0)