CVE-2020-5847

Unraid through 6.8.0 allows Remote Code Execution...

CVE-2020-5847

Unraid 6.8.0 and earlier contains two CVEs: CVE-2020-5847 (remote code execution via insecure use of PHP extract) and CVE-2020-5849 (authentication bypass). Reports and exploit references (Metasploit module and Exploit-DB) confirm practical impact: authenticated admin access can be gained, then a...

CVE-2020-5847

Unraid through 6.8.0 allows Remote Code Execution...

CVE-2020-5849

Unraid 6.8.0 allows authentication bypass. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2020-5847

Unraid through 6.8.0 allows Remote Code Execution. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2020-5849: Incorrect Comparison

Unraid 6.8.0 allows authentication bypass...

CVE-2020-5847: Undefined Security Weakness

Unraid through 6.8.0 allows Remote Code Execution...

PT-2020-6556

Name of the Vulnerable Software and Affected Versions Unraid versions prior to 6.8.1 Description The issue is related to incorrect code generation management in the Unraid operating system. It allows a remote attacker to execute arbitrary code. Recommendations For Unraid versions prior to 6.8.1,...

PT-2020-6544

Name of the Vulnerable Software and Affected Versions Unraid version 6.8.0 Description The issue is related to weaknesses in the authentication procedure of the Unraid operating system. Exploitation of this issue may allow a remote attacker to disclose protected information. Recommendations For...

Unraid OS Detection (HTTP)

HTTP based detection of Unraid OS. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.143516";...

Unraid OS WebUI Missing Authentication

The script checks if the Web UI of Unraid OS is accessible without authentication. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unraid OS < 6.8.1 Web UI RCE Vulnerability - Active Check

Unraid OS is prone to a remote code execution RCE vulnerability in the Web UI. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unraid OS 6.8.0 Web UI Authentication Bypass Vulnerability - Active Check

Unraid OS is prone to an authentication bypass vulnerability in the Web UI. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unraid 6.8.0 Auth Bypass PHP Code Execution

This module exploits two vulnerabilities affecting Unraid 6.8.0. An authentication bypass is used to gain access to the administrative interface, and an insecure use of the extract PHP function can be abused for arbitrary code execution as root. Module Options msf use...