Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-9000. PoCs published by Brandon Perry.
AI-analyzed exploit summary This exploit demonstrates an authenticated privilege escalation vulnerability in Mulesoft ESB Runtime 3.5.1. By sending a crafted HTTP POST request to the /handler/securityService.rpc endpoint, any authenticated user can create an administrator account, enabling remote code execution through WAR deployment or Groovy script evaluation.
Description
Mule Enterprise Management Console (MMC) does not properly restrict access to handler/securityService.rpc, which allows remote authenticated users to gain administrator privileges and execute arbitrary code via a crafted request that adds a new user. NOTE: this issue was originally reported for ESB Runtime 3.5.1, but it originates in MMC.
Exploits (1)
This exploit demonstrates an authenticated privilege escalation vulnerability in Mulesoft ESB Runtime 3.5.1. By sending a crafted HTTP POST request to the /handler/securityService.rpc endpoint, any authenticated user can create an administrator account, enabling remote code execution through WAR deployment or Groovy script evaluation.