PT-2013-1770 · Hewlett Packard · Hp Intelligent Management Center For Automated Network Manager+1

Publicado 2013-03-09 · Atualizado 2019-10-09 · CVE-2012-5203

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center (iMC) versions prior to 5.2 E0401 HP Intelligent Management Center for Automated Network Manager (ANM) versions prior to 5.2 E0401

Description The issue allows remote attackers to obtain sensitive information, modify data, or cause a denial of service. The exact vectors of the attack are unknown.

Recommendations For HP Intelligent Management Center (iMC) versions prior to 5.2 E0401, update to version 5.2 E0401 or later. For HP Intelligent Management Center for Automated Network Manager (ANM) versions prior to 5.2 E0401, update to version 5.2 E0401 or later.

Exploit

Correção

Identificadores relacionados

CVE-2012-5203

ZDI-13-052

Produtos afetados

Hpe Intelligent Management Center

Hp Intelligent Management Center For Automated Network Manager

Referências · 5

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/hp_imc_reportimgservlt_traversal.rb · Exploit
• https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-5203 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=136268852804156&w=2 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-13-052 · Nota de Segurança