PT-2011-2250
CVE-2011-0276
·
تاريخ النشر
2011-01-31
·
تاريخ التحديث
2018-10-10
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
HP OpenView Performance Insight Server versions 5.2 through 5.41
Description
The issue concerns a hidden account in the
com.trinagy.security.XMLUserManager Java class, allowing remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet class.Recommendations
For HP OpenView Performance Insight Server versions 5.2 through 5.41, consider disabling the
com.trinagy.servlet.HelpManagerServlet class until a patch is available to prevent exploitation of the hidden account.
Restrict access to the com.trinagy.security.XMLUserManager Java class to minimize the risk of arbitrary code execution. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾