medium6.5Public exploit code
CVE-2013-6366
The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary code via a Runtime.getRuntime().exec call.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VMware Hyperic HQ Groovy Script-Console - Java Execution (Metasploit)2013-10-14 · remote · multiple · Verified
Impact
The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary code via a Runtime.getRuntime().exec call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vmware | Hyperic Hq | Version 4.6.6 |