PT-2018-17585 · Hewlett Packard · Hp Service Manager Software Web Tier

Publicado 2018-05-22 · Atualizado 2020-07-06 · CVE-2018-6494

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HP Service Manager Software Web Tier versions 9.30 through 9.51

Description The issue allows for Remote SQL Injection, which may result in unauthorized disclosure of data.

Recommendations For HP Service Manager Software Web Tier versions 9.30 through 9.51, update to a version that contains a fix for this issue.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2018-6494

Produtos afetados

Hp Service Manager Software Web Tier

Referências · 5

• http://securitytracker.com/id/1040902 · Nota
• https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03158656 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-6494 · Nota de Segurança
• http://securityfocus.com/bid/104141 · Nota
• https://osv.dev/vulnerability/CVE-2018-6494 · Aviso do Fabricante