KLA10520 Multiple vulnerabilities in HP Operations Orchestration

An unspecified vulnerabilities were found in HP Operations Orchestration. By exploiting these vulnerabilities malicious users can bypass authentication,obtain sensitive information or modify data. These vulnerabilities can be exploited remotely via an unknown vector.

Original advisories

HP security bulletin

HP security bulletin

Related products

HP-Operations-Orchestration

CVE list

CVE-2015-2109 critical

CVE-2015-2108 warning

Solution

Update HP Operations Orchestration to the latest version

Get HP Operations Orchestration

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

• WLF

Write Local Files. Exploitation of vulnerabilities with this impact can lead to writing into some inaccessible files. Files that can be read depends on concrete program errors.

Affected Products

• HP Operations Orchestration 9.xHP Operations Orchestration 10.x