PT-2010-1327 · Hewlett Packard · Hp Web Jetadmin

Publicado 2010-01-14 · Atualizado 2019-10-09 · CVE-2009-4182

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions HP Web Jetadmin version 10.2

Description The issue is related to unspecified vulnerabilities in HP Web Jetadmin when a remote SQL server is used. These vulnerabilities allow remote attackers to obtain access to data or cause a denial of service. The weaknesses may be related to authentication and encryption on the SQL server.

Recommendations For HP Web Jetadmin version 10.2, consider restricting access to the SQL server to minimize the risk of exploitation until a patch is available. As a temporary workaround, review and strengthen authentication and encryption settings on the remote SQL server.

Correção

Identificadores relacionados

CVE-2009-4182

Produtos afetados

Hp Web Jetadmin

Referências · 3

• http://securityfocus.com/bid/37787 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4182 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=126341293311108&w=2 · Aviso do Fabricante