{"vulnerability": "cve-2013-6221", "sightings": [{"uuid": "f5536b79-d1b0-45bd-96fc-1cbf5f2e7b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-6221", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "14c1ec9f-b914-43dd-9972-b20daa077026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-6221", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:23.000000Z"}, {"uuid": "0c0299ed-dae4-4187-816c-7a585bff1f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-6221", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_autopass_license_traversal.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "32147e52-6dcd-454b-979f-dcb52f0e849d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2013-6221", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/33891", "content": "", "creation_timestamp": "2014-06-27T00:00:00.000000Z"}, {"uuid": "aa29fda8-37c8-446c-924a-44239fa89312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-6221", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_autopass_license_traversal.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"rgod \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a code execution flaw in HP AutoPass License Server. It abuses two\\n          weaknesses in order to get its objective. First, the AutoPass application doesn't enforce\\n          authentication in the CommunicationServlet component. Second, it's possible to abuse a\\n          directory traversal when uploading files thorough the same component, allowing to upload\\n          an arbitrary payload embedded in a JSP. The module has been tested successfully on\\n          HP AutoPass License Server 8.01 as installed with HP Service Virtualization 3.50.\", \"disclosure_date\": \"2014-01-10\", \"fullname\": \"exploit/windows/http/hp_autopass_license_traversal\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"HP AutoPass License Server File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/hp_autopass_license_traversal.rb\", \"platform\": \"Java\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"windows/http/hp_autopass_license_traversal\", \"references\": [\"CVE-2013-6221\", \"ZDI-14-195\", \"BID-67989\", \"URL-https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c04333125\"], \"rport\": 5814, \"session_types\": false, \"targets\": [\"Windows 2003 SP2 / HP AutoPass License Server 8.01 / HP Service Virtualization 3.50\", \"Windows 2008 32 bits/ HP AutoPass License Server 8.01 / HP Service Virtualization 3.50\", \"Windows 2008 64 bits/ HP AutoPass License Server 8.01 / HP Service Virtualization 3.50\", \"Windows 2012 / HP AutoPass License Server 8.01 / HP Service Virtualization 3.50\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:48.720908Z"}]}