Skip to content

Commit 449fde5

Browse files
committed
Description update
1 parent c43006f commit 449fde5

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

modules/exploits/windows/http/hp_autopass_license_traversal.rb

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,9 +17,9 @@ def initialize(info = {})
1717
'Description' => %q{
1818
This module exploits a code execution flaw in HP AutoPass License Server. It abuses two
1919
weaknesses in order to get its objective. First, the AutoPass application doesn't enforce
20-
authentication in the CommunicationServlet component. On the other hand, it's possible to
21-
abuse a directory traversal when uploading files thorough the same component, allowing to
22-
upload an arbitrary payload embedded in a JSP. The module has been tested successfully on
20+
authentication in the CommunicationServlet component. Seond, it's possible to abuse a
21+
directory traversal when uploading files thorough the same component, allowing to upload
22+
an arbitrary payload embedded in a JSP. The module has been tested successfully on
2323
HP AutoPass License Server 8.01 as installed with HP Service Virtualization 3.50.
2424
},
2525
'Author' =>

0 commit comments

Comments
 (0)