Skip to content

Commit 2f8d3c3

Browse files
committed
Remove the bug where downcase() is invoked on password which is optional and can be empty.
1 parent 52b81f3 commit 2f8d3c3

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

modules/exploits/multi/http/tomcat_mgr_deploy.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -312,7 +312,7 @@ def report_tomcat_credential
312312
origin_type: :service,
313313
module_fullname: self.fullname,
314314
private_type: :password,
315-
private_data: datastore['PASSWORD'].downcase,
315+
private_data: datastore['PASSWORD'],
316316
username: datastore['USERNAME']
317317
}
318318

0 commit comments

Comments
 (0)