{"uuid": "9d1aee4d-cb91-4e8c-bbae-f2a175de0c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-5202", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/hp_imc_faultdownloadservlet_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"rgod \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a lack of authentication and a directory traversal in HP\\n          Intelligent Management, specifically in the FaultDownloadServlet, in order to\\n          retrieve arbitrary files with SYSTEM privileges. This module has been tested\\n          successfully on HP Intelligent Management Center 5.1 E0202 over Windows 2003 SP2.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/hp_imc_faultdownloadservlet_traversal\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"HP Intelligent Management FaultDownloadServlet Directory Traversal\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/hp_imc_faultdownloadservlet_traversal.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/hp_imc_faultdownloadservlet_traversal\", \"references\": [\"CVE-2012-5202\", \"OSVDB-91027\", \"BID-58675\", \"ZDI-13-051\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:33.476155Z"}