Adobe AEM Sling User Info Servlet Exposure

By kannthu

Informative

Vidoc Module

#misconfig#aem#adobe#exposure

Description

Author: DhiyaneshDk Reference - https://raw.githubusercontent.com/danielmiessler/SecLists/master/Discovery/Web-Content/aem2.txt Metadata shodan-query: http.title:"AEM Sign In",http.component:"Adobe Experience Manager"

Module preview

Concurrent Requests (1)

1. HTTP Request template

GET/system/sling/info.s.../system/sling/info.s...

Matching conditions

word: userID:and

word: text/plainand

status: 200

Passive global matcher

No matching conditions.

On match action

Report vulnerability