CVE-2014-2612

This Metasploit module exploits three vulnerabilities in HP Release Control: an information disclosure to retrieve admin ID, a privilege escalation to change the admin password, and an XXE vulnerability to read arbitrary files. It authenticates, escalates privileges, and then uses XXE to exfiltrate file contents.