PT-2013-1778 · Hewlett Packard · Hp Intelligent Management Center (Imc) User Access Manager

Julien Ahrens · Published 2013-03-09 · Updated 2019-10-09 · CVE-2012-5211

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center (iMC) User Access Manager (UAM) versions prior to 5.2 E0402

Description The issue allows remote attackers to obtain sensitive information, modify data, or cause a denial of service. The estimated number of potentially affected devices and details about real-world incidents are not specified. Technical details about exploitation, such as API endpoints, vulnerable parameters or variables, and function names, are not provided.

Recommendations For HP Intelligent Management Center (iMC) User Access Manager (UAM) versions prior to 5.2 E0402, update to version 5.2 E0402 or later to resolve the issue.

Fix

Related Identifiers

CVE-2012-5211

ZDI-13-058

Affected Products

Hp Intelligent Management Center (Imc) User Access Manager

References · 4

• https://zerodayinitiative.com/advisories/ZDI-13-058 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-5211 · Security Note
• http://marc.info/?l=bugtraq&m=136268852804156&w=2 · Vendor Advisory
• https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03689276 · Vendor Advisory