CVE-2019-1821

This Metasploit module exploits a directory traversal vulnerability in Cisco Prime Infrastructure's TarArchive Java class to upload a JSP payload to the Apache Tomcat web apps directory, achieving unauthenticated remote code execution.

This exploit leverages a directory traversal vulnerability in Cisco Prime Infrastructure's Health Monitor HA TarArchive feature to upload a malicious JSP file, achieving remote code execution. The JSP file establishes a reverse shell to the attacker's specified IP and port.

The repository contains a functional Python exploit for CVE-2019-1821, which leverages a directory traversal vulnerability in Cisco Prime Infrastructure's Health Monitor HA TarArchive feature to achieve unauthenticated remote code execution. The exploit crafts a malicious tar archive containing a JSP payload, uploads it via the vulnerable endpoint, and establishes a reverse shell.

The repository contains a functional Python exploit for CVE-2019-1821, which leverages a directory traversal vulnerability in Cisco Prime Infrastructure's Health Monitor HA TarArchive feature to achieve unauthenticated remote code execution. The exploit crafts a malicious tar archive containing a JSP payload, uploads it via an unauthenticated endpoint, and establishes a reverse shell.

This Metasploit module exploits a directory traversal vulnerability in Cisco Prime Infrastructure's TarArchive class to upload a malicious JSP file, achieving unauthenticated remote code execution.