PT-2014-6308 · Hewlett Packard · Hp Data Protector

Aniway · Publicado 2014-07-23 · Atualizado 2024-08-06 · CVE-2014-5160

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP Data Protector (affected versions not specified)

Description The issue allows remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request. The vendor reportedly asserts that this behavior is "by design."

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2014-5160

ZDI-14-262

ZDI-14-263

Produtos afetados

Hp Data Protector

Referências · 6

• http://zerodayinitiative.com/advisories/ZDI-14-263 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5160 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-263 · Nota de Segurança
• https://t.me/cvenotify/89392 · Publicação no Telegram
• https://zerodayinitiative.com/advisories/ZDI-14-262 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-14-262 · Nota