Exploitation Summary
CVE-2014-3914 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including Metasploit, including a Metasploit module exploits/multi/http/rocket_servergraph_file_requestor_rce.
AI-analyzed exploit summary This Metasploit module exploits directory traversal flaws in Rocket Servergraph Admin Center's fileRequestor servlet to achieve remote code execution. It supports multiple targets (Linux/Windows) and payload types (native/CMD/VBScript), leveraging file writes and command execution via traversal sequences.
Description
Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitrary files via a .. (dot dot) in the query parameter in a writeDataFile action to the fileRequestor servlet, execute arbitrary files via a .. (dot dot) in the query parameter in a (2) run or (3) runClear action to the fileRequestor servlet, (4) read arbitrary files via a readDataFile action to the fileRequestor servlet, (5) execute arbitrary code via a save_server_groups action to the userRequest servlet, or (6) delete arbitrary files via a del action in the fileRequestServlet servlet.
Exploits (2)
This Metasploit module exploits directory traversal flaws in Rocket Servergraph Admin Center's fileRequestor servlet to achieve remote code execution. It supports multiple targets (Linux/Windows) and payload types (native/CMD/VBScript), leveraging file writes and command execution via traversal sequences.
This Metasploit module exploits directory traversal flaws in Rocket Servergraph Admin Center's fileRequestor servlet to achieve remote code execution. It supports multiple targets (Linux/Windows) and payload types (native, CMD, VBS).