Correct the CVE reference

rapid7 · Sep 15, 2021 · fb74888 · fb74888
1 parent d82ed7d
commit fb74888
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/modules/exploits/multi/http/opmanager_sumpdu_deserialization.rb b/modules/exploits/multi/http/opmanager_sumpdu_deserialization.rb
@@ -32,7 +32,8 @@ def initialize(info = {})
         'Arch' => [ARCH_CMD, ARCH_PYTHON, ARCH_X86, ARCH_X64],
         'Platform' => [ 'win', 'linux', 'python', 'unix' ],
         'References' => [
-          [ 'CVE', '2021-3287' ],
+          [ 'CVE', '2020-28653' ], # original CVE
+          # [ 'CVE', '2021-3287' ], # patch bypass
           [ 'URL', 'https://haxolot.com/posts/2021/manageengine_opmanager_pre_auth_rce/' ]
         ],
         'Privileged' => true,