Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal
Posted by deepcore on June 20, 2019 – 1:09 pm
This Metasploit module exploits a vulnerability found in Cisco Prime Infrastructure. The issue is that the TarArchive Java class the HA Health Monitor component uses does not check for any directory traversals while unpacking a Tar file, which can be abused by a remote user to leverage the UploadServlet class to upload a JSP payload to the Apache Tomcat’s web apps directory, and gain arbitrary remote code execution. Note that authentication is not required to exploit this vulnerability.
Post a reply
You must be logged in to post a comment.