CVE-2014-7883
HP Universal CMDB Probe 9.05, 10.01, 10.11 - Exposure of Sensitive Information via HTTP TRACE Method
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-7883. PoCs published by Hans-Martin Muench.
AI-analyzed exploit summary The exploit demonstrates an authentication bypass in HP UCMDB's JMX-Console by using the HEAD method to bypass security constraints limited to GET and POST. It creates a new user via a crafted curl command, leveraging the vulnerability to gain unauthorized access.
Description
HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response.
Exploits (1)
The exploit demonstrates an authentication bypass in HP UCMDB's JMX-Console by using the HEAD method to bypass security constraints limited to GET and POST. It creates a new user via a crafted curl command, leveraging the vulnerability to gain unauthorized access.