Lucene search
HistoryMay 25, 2015 - 5:59 p.m.
CVE-2015-2121
hp
network virtualization
loadrunner
performance center
remote attack
arbitrary file reading
url
vulnerability
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.16 Low
EPSS
Percentile
96.0%
HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2) NetworkEditorController component, aka ZDI-CAN-2569.
Affected configurations
Node
hpnetwork_virtualizationMatch8.61
ORhpnetwork_virtualizationMatch11.52
Related
securityvulns
securityvulns
nessus
nessus
Network Virtualization for HP LoadRunner Information Disclosure
2015-05-15 00:00:00
cvelist
cvelist
CVE-2015-2121
2015-05-25 17:00:00
zdi
zdi
Hewlett-Packard Network Virtualization Information Disclosure Vulnerability
2015-05-12 00:00:00
prion
prion
Code injection
2015-05-25 17:59:00
nvd
nvd
CVE-2015-2121
2015-05-25 17:59:02
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.16 Low
EPSS
Percentile
96.0%
Related for CVE-2015-2121