PT-2011-2735 · Hewlett Packard+1 · Hp Discovery & Dependency Mapping Inventory+1

Publicado

2011-03-25

·

Atualizado

2017-08-17

·

CVE-2011-0890

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions HP Discovery & Dependency Mapping Inventory (DDMI) versions 7.50 through 7.70, 9.30
Description The issue allows remote attackers to obtain potentially sensitive information or have unspecified other impact by leveraging the public read community, as HP Discovery & Dependency Mapping Inventory (DDMI) launches the Windows SNMP service with its default configuration.
Recommendations For versions 7.50 through 7.70, 9.30, consider reconfiguring the Windows SNMP service to use a secure community string instead of the default public read community to minimize the risk of exploitation.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2011-0890

Produtos afetados

Hp Discovery & Dependency Mapping Inventory
Windows Snmp