CVE-2020-7200 - HPE Systems Insight Manager 7.6.x Unauthenticated RCE via AMF Deserialization#14846

Merged

space-r7 merged 12 commits intorapid7:masterfrom gwillcox-r7:CVE-2020-7200

Mar 8, 2021

Commits on Mar 2, 2021

First attempt at CVE-2020-7200 module, with RuboCopped module
gwillcox-r7
committed

Commits on Mar 3, 2021

Commits on Mar 4, 2021

First round of code adjustments per review comments
gwillcox-r7
committed

Commits on Mar 5, 2021

Commits on Mar 8, 2021

Change gsub! to gsub so that we don't end up with nil errors when a match isn't found
gwillcox-r7
committed
Improve the check logic to more accurately detect if a target is vulnerable or not
gwillcox-r7
committed
Rubocop module again and also update the documentation to reflect recent changes
gwillcox-r7
committed