U.S. Dept Of Defense · Report #212985
Remote code execution vulnerability on a DoD website
Validstatus
criticalseverity
17upvotes
3 Jul 2017disclosed
Summary
A remote code execution (RCE) vulnerability was found on a DoD website which could have enabled an attacker to execute remote commands on the web server. Thank you @n0rb3r7 for notifying us of this vulnerability!
I was able to leverage a recent, well-known vulnerability to achieve arbitrary, remote command execution on a U.S. Department Of Defense server.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.