RCE in Vmware Hyperic Hq

CVE-2013-6366

The Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators to execute arbitrary code via a Runtime.getRuntime().exec call.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.070 (93.5th percentile) — read the EPSS interpretation.

Affected products

Vmware Hyperic_hq — versions 4.6.6
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)