{"uuid": "d9c537ea-2df4-42a1-a96d-bab5db2acc8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-6601", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/webnms_cred_disclosure.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Pedro Ribeiro \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module abuses two vulnerabilities in WebNMS Framework Server 5.2 to extract\\n          all user credentials. The first vulnerability is an unauthenticated file download\\n          in the FetchFile servlet, which is used to download the file containing the user\\n          credentials. The second vulnerability is that the passwords in the file are\\n          obfuscated with a very weak algorithm which can be easily reversed.\\n          This module has been tested with WebNMS Framework Server 5.2 and 5.2 SP1 on\\n          Windows and Linux.\", \"disclosure_date\": \"2016-07-04\", \"fullname\": \"auxiliary/admin/http/webnms_cred_disclosure\", \"is_install_path\": true, \"mod_time\": \"2025-05-16 01:16:37 +0000\", \"name\": \"WebNMS Framework Server Credential Disclosure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/webnms_cred_disclosure.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/http/webnms_cred_disclosure\", \"references\": [\"CVE-2016-6601\", \"CVE-2016-6602\", \"URL-https://blogs.securiteam.com/index.php/archives/2712\", \"URL-https://seclists.org/fulldisclosure/2016/Aug/54\"], \"rport\": 9090, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:51.169090Z"}