CVE-2013-6720
EXPLOITEDIBM Tealeaf CX 7.x, 8.x-8.6, 8.7-8.8 - Authenticated Path Traversal via Log Parameter
Title source: llmExploitation Summary
CVE-2013-6720 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including drone.
AI-analyzed exploit summary This exploit demonstrates a remote OS command injection vulnerability in IBM Tealeaf CX (v8 release 8) by injecting commands into the 'testconn_host' parameter of the delivery.php endpoint. It leverages a POST request with crafted data to execute arbitrary commands without authentication.
Description
Directory traversal vulnerability in download.php in the Passive Capture Application (PCA) web console in IBM Tealeaf CX 7.x, 8.x through 8.6, 8.7 before FP2, and 8.8 before FP2 allows remote authenticated users to bypass intended access restrictions via a .. (dot dot) in the log parameter, as demonstrated using a crafted request for a customer-support file, as demonstrated by a log file.
Exploits (1)
This exploit demonstrates a remote OS command injection vulnerability in IBM Tealeaf CX (v8 release 8) by injecting commands into the 'testconn_host' parameter of the delivery.php endpoint. It leverages a POST request with crafted data to execute arbitrary commands without authentication.