Remote Code Execution in VMware Hyperic HQ by Groovy Script Console
CVE-2013-6366

Currently unrated

Key Information:

Vendor

Vmware
Status
Hyperic Hq
Vendor
CVE Published:
4 November 2013

What is CVE-2013-6366?

The Groovy script console present in VMware Hyperic HQ version 4.6.6 contains a vulnerability that enables remote authenticated administrators to execute arbitrary code on the server. This flaw arises from improper handling of commands executed through the Runtime.getRuntime().exec call. An attacker with administrative access can leverage this vulnerability to run malicious scripts, potentially compromising the integrity and availability of the server.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.exploit-db.com/exploits/28962/
exploitx_refsource_EXPLOIT-DB

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.