CVEs-PoC/2021/CVE-2021-41382.md

### [CVE-2021-41382](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41382)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)

### Description

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface.

### POC

#### Reference
- http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Improper-Access-Control.html
- http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Insecure-Direct-Object-Reference.html

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/basubanakar/Plastic-SCM-Exploit
- https://github.com/ph4nt0m-py/Plastic-SCM-Exploit