SAP_EEM_CVE-2020-6207

CVE-2020-6207 的 PoC（SAP Solution Manager 中缺失认证检查） 此脚本用于检查并利用 SAP EEM Servlet（tcsmdagentapplicationeem）中的认证缺失漏洞，该漏洞可导致连接到 SAP Solution Manager 的 SAP SMDAgent 远程代码执行（RCE）。 原始发现者： Pablo Artuso Yvan 'iggy' G 论文：An Unauthenticated Journey to Root :Pwning Your Company's Enterprise Software Servers...

SAP Solution Manager 7.2 Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAP Solution Manager remote unauthorized OS commands execution', 'License' = MSFLICENSE, 'Author' = 'Yvan Genuer', @1ggy The researcher who...

SAP Solution Manager remote unauthorized OS commands execution

This module exploits the CVE-2020-6207 vulnerability within the SAP EEM servlet tcsmdagentapplicationeem of SAP Solution Manager SolMan running version 7.2. The vulnerability occurs due to missing authentication checks when submitting a SOAP request to the /EemAdminService/EemAdmin page to get...