PT-2014-4815 · Hewlett Packard · Hp Executive Scorecard

Publicado 2014-06-18 · Atualizado 2019-10-09 · CVE-2014-2611

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Executive Scorecard versions 9.40 through 9.41

Description The issue allows remote authenticated users to execute arbitrary code, obtain sensitive information, or delete data via unspecified vectors.

Recommendations For versions 9.40 and 9.41, update to a version that fixes this issue to prevent potential code execution, data exposure, or deletion.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2014-2611

ZDI-14-210

Produtos afetados

Hp Executive Scorecard

Referências · 7

• http://securitytracker.com/id/1030439 · Nota
• http://secunia.com/advisories/59363 · Nota
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-2611 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-14-210 · Nota
• http://securityfocus.com/bid/68093 · Nota
• https://zerodayinitiative.com/advisories/ZDI-14-210 · Nota de Segurança