Detections
Analytics
HP Intelligent Management Center SOM Module < 7.0 E0101 Multiple Vulnerabilities
high Nessus Plugin ID 71892
Language:
Synopsis
The version of the HP Intelligent Management Center Service Operation Management Software module on the remote host is affected by multiple vulnerabilities.Description
The version of the HP Intelligent Management Center Service Operation Management Software Module on the remote is prior to 7.0 E0101. It is therefore, potentially affected by multiple vulnerabilities :- An authentication bypass vulnerability exists in the 'euAccountService' servlet that allows arbitrary users to be created without authentication. (CVE-2013-4824)
- An information disclosure vulnerability exists in the 'sdFileDownload' servlet that allows for arbitrary file access. (CVE-2013-4826)
Solution
Upgrade the iMC SOM module to version 7.0 E0101 or later.See Also
http://www.nessus.org/u?d181e26a
Plugin Details
Severity: High
ID: 71892
File Name: hp_imc_som_70_e0101.nasl
Version: 1.6
Type: remote
Family: Misc.
Published: 1/9/2014
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:hp:intelligent_management_center
Exploit Ease: No known exploits are available
Patch Publication Date: 9/30/2013
Vulnerability Publication Date: 10/8/2013
Reference Information
CVE: CVE-2013-4824, CVE-2013-4826