PT-2014-4815 · Hewlett Packard · Hp Executive Scorecard

Published 2014-06-18 · Updated 2019-10-09 · CVE-2014-2611

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Executive Scorecard versions 9.40 through 9.41

Description The issue allows remote authenticated users to execute arbitrary code, obtain sensitive information, or delete data via unspecified vectors.

Recommendations For versions 9.40 and 9.41, update to a version that fixes this issue to prevent potential code execution, data exposure, or deletion.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-2611

ZDI-14-210

Affected Products

Hp Executive Scorecard

References · 7

• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2611 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-210 · Security Note
• http://securitytracker.com/id/1030439 · Note
• http://secunia.com/advisories/59363 · Note
• http://zerodayinitiative.com/advisories/ZDI-14-210 · Note
• http://securityfocus.com/bid/68093 · Note