CVE-2011-0276

Name of the Vulnerable Software and Affected Versions HP OpenView Performance Insight Server versions 5.2 through 5.41

Description The issue concerns a hidden account in the com.trinagy.security.XMLUserManager Java class, allowing remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet class.

Recommendations For HP OpenView Performance Insight Server versions 5.2 through 5.41, consider disabling the com.trinagy.servlet.HelpManagerServlet class until a patch is available to prevent exploitation of the hidden account. Restrict access to the com.trinagy.security.XMLUserManager Java class to minimize the risk of arbitrary code execution.