File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
modules/exploits/windows/http Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -17,9 +17,9 @@ def initialize(info = {})
17
17
'Description' => %q{
18
18
This module exploits a code execution flaw in HP AutoPass License Server. It abuses two
19
19
weaknesses in order to get its objective. First, the AutoPass application doesn't enforce
20
- authentication in the CommunicationServlet component. On the other hand , it's possible to
21
- abuse a directory traversal when uploading files thorough the same component, allowing to
22
- upload an arbitrary payload embedded in a JSP. The module has been tested successfully on
20
+ authentication in the CommunicationServlet component. Seond , it's possible to abuse a
21
+ directory traversal when uploading files thorough the same component, allowing to upload
22
+ an arbitrary payload embedded in a JSP. The module has been tested successfully on
23
23
HP AutoPass License Server 8.01 as installed with HP Service Virtualization 3.50.
24
24
} ,
25
25
'Author' =>
You can’t perform that action at this time.
0 commit comments