PT-2014-4818 · Hewlett Packard · Hp Sitescope

Publicado 2014-07-07 · Atualizado 2017-01-07 · CVE-2014-2614

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP SiteScope versions 11.1x through 11.13 HP SiteScope versions 11.2x through 11.24

Description The issue allows remote attackers to bypass authentication, potentially leading to information disclosure. The estimated number of potentially affected devices and details about real-world incidents are not specified.

Recommendations For HP SiteScope versions 11.1x through 11.13, update to a version outside of this range to resolve the issue. For HP SiteScope versions 11.2x through 11.24, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the EmailServlet servlet to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2014-2614

ZDI-14-228

Produtos afetados

Hp Sitescope

Referências · 6

• http://securitytracker.com/id/1030519 · Nota
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04355129 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-14-228 · Nota de Segurança
• http://securityfocus.com/bid/68361 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2614 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2614 · Nota de Segurança