CVE-2015-2746
Websense TRITON 7.8.3 and V-Series < 7.8.4 - Authenticated Command Injection via CommandLineServlet
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-2746. PoCs published by Han Sahin.
AI-analyzed exploit summary The writeup describes a command injection vulnerability in Websense Appliance Manager, allowing arbitrary code execution via the CommandLineServlet. The PoC demonstrates how to exploit this to read /etc/shadow by injecting commands into the Destination parameter.
Description
The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before 7.8.4 Hotfix 02 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the "second" parameter of a command, as demonstrated by the Destination parameter in the ping command.
Exploits (1)
The writeup describes a command injection vulnerability in Websense Appliance Manager, allowing arbitrary code execution via the CommandLineServlet. The PoC demonstrates how to exploit this to read /etc/shadow by injecting commands into the Destination parameter.