A weak password in the background of a system causes Command Execution + unauthorized redis Access Vulnerability.

A weak password in the background of a system causes Command Execution + unauthorized redis Access Vulnerability.

Http: // MAID: 8000/jenkins

It looks like a magic hero game played by agents in the Age of gathering


The weak password admin/admin can be used to log on. After logon, you can control system management and execute commands.


Website path

Intranet

Open redis unauthorized access to port 6379


The jenkins permission is not enough. redis test and write shell is not successful yet...

Solution:

Modify weak passwords and add Authentication