Sign upLogin

rapid7/metasploit-framework

View on GitHub
Star
modules/exploits/windows/http/zenworks_assetmgmt_uploadservlet.rb

Summary

Maintainability
B
5 hrs
Test Coverage

Method exploit has 104 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def exploit

    # Generate the WAR containing the payload
    app_base = rand_text_alphanumeric(4+rand(32-4))
    jsp_name = rand_text_alphanumeric(8+rand(8))
Severity: Major
Found in modules/exploits/windows/http/zenworks_assetmgmt_uploadservlet.rb - About 4 hrs to fix

    Method initialize has 40 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def initialize(info = {})
    super(update_info(info,
      'Name'        => 'Novell ZENworks Asset Management Remote Execution',
      'Description' => %q{
          This module exploits a path traversal flaw in Novell ZENworks Asset Management
    Severity: Minor
    Found in modules/exploits/windows/http/zenworks_assetmgmt_uploadservlet.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status