CVE-2014-3915
Rocket Servergraph - Remote Code Execution via userRequest Servlet Commands
Title source: llmDescription
The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote attackers to execute arbitrary commands via a (1) auth, (2) auth_session, (3) auth_simple, (4) add, (5) add_flat, (6) remove, (7) set_pwd, (8) add_permissions, (9) revoke_permissions, (10) runAsync, or (11) tsmRequest command.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-14-164/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/67780
Scores
EPSS
0.0312
EPSS Percentile
86.2%
Details
CWE
CWE-94
Status
published
Products (1)
rocketsoftware/rocket_servergraph
Published
Jun 11, 2014
Tracked Since
Feb 18, 2026