CVE-2013-4812
HP Identity Driven Manager 4.0 - Remote Code Execution via UpdateCertificatesServlet File Upload
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2013-4812.
PoCs published by Metasploit, including Metasploit module exploits/windows/http/hp_pcm_snac_update_certificates.
AI-analyzed exploit summary This Metasploit module exploits a path traversal vulnerability in HP ProCurve Manager SNAC Server (CVE-2013-4812) to upload and execute a JSP payload, achieving remote code execution. It bypasses authentication and leverages a flaw in the UpdateCertificatesServlet to write arbitrary files.
Description
UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-1743.
Exploits (2)
This Metasploit module exploits a path traversal vulnerability in HP ProCurve Manager SNAC Server (CVE-2013-4812) to upload and execute a JSP payload, achieving remote code execution. It bypasses authentication and leverages a flaw in the UpdateCertificatesServlet to write arbitrary files.
This Metasploit module exploits a path traversal vulnerability in HP ProCurve Manager SNAC Server (CVE-2013-4812) to upload a malicious JSP file, bypassing authentication. It achieves remote code execution by leveraging a flawed file upload mechanism in the UpdateCertificatesServlet.