HP SiteScope 'issueSiebelCmd' SOAP Request Remote Code Execution Vulnerability
BID:63478
Info
HP SiteScope 'issueSiebelCmd' SOAP Request Remote Code Execution Vulnerability
| Bugtraq ID: | 63478 |
| Class: | Unknown |
| CVE: |
CVE-2013-4835 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 30 2013 12:00AM |
| Updated: | Aug 01 2014 12:12AM |
| Credit: | Andrea Micalizzi aka rgod |
| Vulnerable: |
HP SiteScope 11.10 HP SiteScope 10.14 HP SiteScope 10.13 |
| Not Vulnerable: | |
Discussion
HP SiteScope 'issueSiebelCmd' SOAP Request Remote Code Execution Vulnerability
HP SiteScope is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the affected application.
SiteScope 10.1x, 11.1x, and 11.21 are vulnerable.
HP SiteScope is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the affected application.
SiteScope 10.1x, 11.1x, and 11.21 are vulnerable.
Exploit / POC
HP SiteScope 'issueSiebelCmd' SOAP Request Remote Code Execution Vulnerability
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploit code is available:
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploit code is available:
Solution / Fix
HP SiteScope 'issueSiebelCmd' SOAP Request Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
HP SiteScope 'issueSiebelCmd' SOAP Request Remote Code Execution Vulnerability
References:
References: