{"uuid": "24a3f214-7b60-4e09-81b2-0945015ddc78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-4823", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/hp_imc_bims_downloadservlet_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"rgod \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a lack of authentication and a directory traversal in HP\\n          Intelligent Management, specifically in the DownloadServlet from the BIMS component,\\n          in order to retrieve arbitrary files with SYSTEM privileges. This module has been\\n          tested successfully on HP Intelligent Management Center 5.1 E0202 with BIMS 5.1 E0201\\n          over Windows 2003 SP2.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/hp_imc_bims_downloadservlet_traversal\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"HP Intelligent Management BIMS DownloadServlet Directory Traversal\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/hp_imc_bims_downloadservlet_traversal.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/hp_imc_bims_downloadservlet_traversal\", \"references\": [\"CVE-2013-4823\", \"OSVDB-98248\", \"BID-62897\", \"ZDI-13-239\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:33.223804Z"}