PT-2015-5624 · Hewlett Packard · Hp Webinspect

Jakub Palaczynski · Published 2015-06-07 · Updated 2019-10-09 · CVE-2015-2125

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions HP WebInspect versions 7.x through 10.4 before 10.4 update 1

Description The issue allows remote authenticated users to bypass intended access restrictions. The exact vectors used for the bypass are not specified.

Recommendations For HP WebInspect versions 7.x through 10.4, update to 10.4 update 1 to resolve the issue.

Exploit

Fix

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2015-2125

Affected Products

Hp Webinspect

References · 5

• 🔥 https://exploit-db.com/exploits/37250 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2125 · Security Note
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04695307 · Vendor Advisory
• http://securitytracker.com/id/1032478 · Note
• http://securityfocus.com/bid/75036 · Note