redshift-cybersecurity/cve-2024-41628Python exploit script for CVE-2024-41628, a Local File Inclusion vulnerability in ClusterControl CMON API (ports 9500/9501). Retrieves arbitrary system files including /etc/shadow and SSH keys from root-privileged service.
Simple exploit script developed by Redshift Cyber Security to exploit (CVE-2024-41628) ClusterControl LFI vulnerability.
The vulnerability affects the CMON API and specifically the RPC and RPC-TLS user interfaces which by default reside on port 9500 and 9501 respectively.
Due to ClusterControl also typically running as root, any system file can be retrieved.
Examples of files to retrieve:
Affected versions of ClusterControl are 1.9.8 before 1.9.8-9778, 2.0.0 before 2.0.0-9779, and 2.1.0 before 2.1.0-9780.
python3 CVE-2024-41628.py ip port file
python3 CVE-2024-41628.py -h
python3 CVE-2024-41628.py 127.0.0.1 9500 /etc/shadow