ID:4045 - Exploit for Code Injection in SoapUI - CVE-2014-1202

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Exploits ID:4045 - Exploit for Code Injection in SoapUI - CVE-2014-1202

ID:4045 - Exploit for Code Injection in SoapUI - CVE-2014-1202

Published: August 11, 2020


Vulnerability identifier: #VU42108
Vulnerability risk: High
CVE-ID: CVE-2014-1202
CWE-ID: CWE-94
Exploitation vector: Remote access
Vulnerable software:
SoapUI

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.


Remediation

Install update from vendor's website.