Lucene search

CertccCVE-2013-3574

HistoryJun 14, 2013 - 1:07 p.m.

CVE-2013-3574

2013-06-1413:07:29

CWE-20

certcc

web.nvd.nist.gov

cve

2013

3574

path traversal

vulnerability

hp insight diagnostics

remote attackers

arbitrary files

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:C/A:N

AI Score

6.9

Confidence

Low

EPSS

0.004

Percentile

73.2%

JSON

Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath (aka mount) parameter.

Affected configurations

Nvd

Node

hpinsight_diagnosticsMatch9.4.0.4710

VendorProductVersionCPE
hpinsight_diagnostics9.4.0.4710cpe:2.3:a:hp:insight_diagnostics:9.4.0.4710:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	insight_diagnostics	9.4.0.4710	cpe:2.3:a:hp:insight_diagnostics:9.4.0.4710:::::::*

References

www.kb.cert.org/vuls/id/324668

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:C/A:N

AI Score

6.9

Confidence

Low

EPSS

0.004

Percentile

73.2%

JSON

Related for CVE-2013-3574