CVE-2014-1649

This Metasploit module exploits CVE-2014-1649 in Symantec Workspace Streaming by uploading a malicious WAR file via an XMLRPC call to achieve remote code execution. It abuses the JBoss auto-deploy feature to execute the payload.

This Metasploit module exploits a file upload vulnerability in Symantec Workspace Streaming via XMLRPC to achieve remote code execution by deploying a malicious WAR file to a JBoss server. It leverages the ManagementAgentServer.putFile method to upload arbitrary files and abuses JBoss auto-deploy for execution.