CVE-2020-5849

Unraid 6.8.0 allows authentication bypass...

CVE-2020-5847

Unraid through 6.8.0 allows Remote Code Execution...

Remote code execution

Unraid through 6.8.0 allows Remote Code Execution...

Authentication flaw

Unraid 6.8.0 allows authentication bypass...

CVE-2020-5849

Unraid 6.8.0 allows authentication bypass...

CVE-2020-5849

Unraid 6.8.0 allows authentication bypass...

CVE-2020-5849

Summary (CVE-2020-5849) Unraid 6.8.0 contains an authentication bypass that can lead to remote code execution when exploited alongside the related issue (CVE-2020-5847). The Nessus plugin notes that Unraid

CVE-2020-5847

Unraid through 6.8.0 allows Remote Code Execution...

CVE-2020-5847

Unraid 6.8.0 and earlier contains two CVEs: CVE-2020-5847 (remote code execution via insecure use of PHP extract) and CVE-2020-5849 (authentication bypass). Reports and exploit references (Metasploit module and Exploit-DB) confirm practical impact: authenticated admin access can be gained, then a...

CVE-2020-5847

Unraid through 6.8.0 allows Remote Code Execution...

CVE-2020-5847

Unraid through 6.8.0 allows Remote Code Execution. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2020-5849

Unraid 6.8.0 allows authentication bypass. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

Unraid OS Detection (HTTP)

HTTP based detection of Unraid OS. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.143516";...

Unraid OS 6.8.0 Web UI Authentication Bypass Vulnerability - Active Check

Unraid OS is prone to an authentication bypass vulnerability in the Web UI. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unraid OS WebUI Missing Authentication

The script checks if the Web UI of Unraid OS is accessible without authentication. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unraid OS < 6.8.1 Web UI RCE Vulnerability - Active Check

Unraid OS is prone to a remote code execution RCE vulnerability in the Web UI. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unraid 6.8.0 Auth Bypass PHP Code Execution

This module exploits two vulnerabilities affecting Unraid 6.8.0. An authentication bypass is used to gain access to the administrative interface, and an insecure use of the extract PHP function can be abused for arbitrary code execution as root. Module Options msf use...