PT-2014-6308 · Hewlett Packard · Hp Data Protector

Aniway · Published 2014-07-23 · Updated 2024-08-06 · CVE-2014-5160

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP Data Protector (affected versions not specified)

Description The issue allows remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request. The vendor reportedly asserts that this behavior is "by design."

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-5160

ZDI-14-262

ZDI-14-263

Affected Products

Hp Data Protector

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2014-5160 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-263 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-262 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-14-263 · Note
• https://t.me/cvenotify/89392 · Telegram Post
• http://zerodayinitiative.com/advisories/ZDI-14-262 · Note