HPE Intelligent Management Center dbman Command 10001 Information Disclosure

Software Link: https://h10145.www1.hpe.com/Downloads/DownloadSoftware.aspx?SoftwareReleaseUId=16759&ProductNumber=JG747AAE&lang=en&cc=us&prodSeriesId=4176535&SaidNumber=

Tested on Version: iMC_PLAT_7.1_E0302_Standard_Windows and iMC_PLAT_7.2_E0403_Std_Win

Tested on: Windows 7

CVE : CVE-2019-5392

Conversion of Nessus Plugin to Python Exploit

Nessus Plugin Name: hp_imc_dbman_cmd_10001_info_disclosure.nasl

Description: This vulnerability allow remote attacker to view the contents of arbitrary directories under the security context of the SYSTEM or root user.

See Also: https://www.tenable.com/plugins/nessus/118038

Exploit-DB: https://www.exploit-db.com/exploits/47408

In this exploit I converted the Nessus Plugin to Python by using Exploit https://www.exploit-db.com/exploits/43198

POC of iMC_PLAT_7.1_E0302_Standard_Windows

POC of iMC_PLAT_7.2_E0403_Std_Win