HP SiteScope 11.1x < 11.13 or 11.2x < 11.24 IP3 Remote Privilege Escalation

high Nessus Plugin ID 81206

Language:

Synopsis

A web application installed on the remote host is affected by a privilege escalation vulnerability.

Description

According to its self reported version, the installation of HP SiteScope on the remote host is 11.1x prior to 11.13 or 11.2x prior to 11.24 IP3. It is, therefore, affected by a privilege escalation vulnerability where authorized users can gain privileges not assigned to their role on the system.

Solution

Upgrade to version 11.13 / 11.24 IP3 or later. Alternatively, apply the appropriate patch.

Plugin Details

Severity: High

ID: 81206

File Name: hp_sitescope_hpsbmu03232.nasl

Version: 1.11

Type: remote

Family: CGI abuses

Published: 2/6/2015

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.2

CVSS v2

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.1

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N

CVSS v3

Risk Factor: High

Base Score: 8.1

Temporal Score: 7.1

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:hp:sitescope

Required KB Items: installed_sw/sitescope

Exploit Ease: No known exploits are available

Patch Publication Date: 1/23/2015

Vulnerability Publication Date: 1/23/2015

Reference Information

CVE: CVE-2014-7882

BID: 72459

HP: HPSBMU03232, HPSN-2008-002, SSRT101782, emr_na-c04539443

Detections

Analytics