Signature Detail
Short Name |
APP:ROCKET-SERVERGRAPH-CE |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Rocket Servergraph Admin Center userRequest and tsmRequest Command Execution |
Release Date |
2014/07/07 |
Update Number |
2396 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Rocket Servergraph Admin Center userRequest and tsmRequest Command Execution
This signature detects attempts to exploit a known vulnerability against Rocket Servergraph, an interface for monitoring backup solutions such as IBM Tivoli Storage Manager, Symantec NetBackup etc. These vulnerabilities are due to input validation errors when handling requests to the URIs userRequest and tsmRequest. A remote unauthenticated attacker can exploit these vulnerabilities to achieve arbitrary command execution under the context of the SYSTEM user.
References
- CVE: CVE-2014-3915