HPSBGN03625 rev.1 - HP Touchpoint Analytics Execution of Arbitrary Code

Potential Security Impact

Execution of arbitrary code.

Source: HP, HP Product Security Response Team (PSRT)

Reported by: Peleg Hadar (SafeBreach Labs)

VULNERABILITY SUMMARY

A potential security vulnerability has been identified with certain versions of HP Touchpoint Analytics prior to version 4.1.4.2827.

This vulnerability may allow a local attacker with administrative privileges to execute arbitrary code via an HP Touchpoint Analytics system service.

RESOLUTION

The below options highlight how to detect if a device is affected by this vulnerability and for remediation actions.