high7.5Public exploit code
CVE-2013-4835
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP SiteScope issueSiebelCmd - Remote Code Execution (Metasploit)2013-12-24 · remote · unix · Verified
Impact
The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Sitescope | Versions 10.11, 10.13, 11.01, 11.1, 11.10, 11.11 |
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/30473
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969435
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03969435
- http://www.exploit-db.com/exploits/30473
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969435
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03969435