Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:ROCKET-SERVERGRAPH-CE |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Rocket Servergraph Admin Center userRequest and tsmRequest Command Execution |
Release Date |
2014/07/07 |
Update Number |
2396 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: Rocket Servergraph Admin Center userRequest and tsmRequest Command Execution
This signature detects attempts to exploit a known vulnerability against Rocket Servergraph, an interface for monitoring backup solutions such as IBM Tivoli Storage Manager, Symantec NetBackup etc. These vulnerabilities are due to input validation errors when handling requests to the URIs userRequest and tsmRequest. A remote unauthenticated attacker can exploit these vulnerabilities to achieve arbitrary command execution under the context of the SYSTEM user.
Extended Description
The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote attackers to execute arbitrary commands via a (1) auth, (2) auth_session, (3) auth_simple, (4) add, (5) add_flat, (6) remove, (7) set_pwd, (8) add_permissions, (9) revoke_permissions, (10) runAsync, or (11) tsmRequest command.
Affected Products
- Rocketsoftware rocket_servergraph -
References
- CVE: CVE-2014-3915