{"uuid": "a51a246e-543a-440b-a273-c39bd5b6b065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-5877", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/oracle_demantra_file_retrieval.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Oliver Gruskovnjak\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a file download vulnerability found in Oracle\\n          Demantra 12.2.1 in combination with an authentication bypass. By\\n          combining these exposures, an unauthenticated user can retrieve any file\\n          on the system by referencing the full file path to any file a vulnerable\\n          machine.\", \"disclosure_date\": \"2014-02-28\", \"fullname\": \"auxiliary/scanner/http/oracle_demantra_file_retrieval\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Oracle Demantra Arbitrary File Retrieval with Authentication Bypass\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/oracle_demantra_file_retrieval.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/oracle_demantra_file_retrieval\", \"references\": [\"CVE-2013-5877\", \"CVE-2013-5880\", \"URL-https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2013-5877/\", \"URL-https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2013-5880/\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:49.794056Z"}