Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-4811
HistorySep 16, 2013 - 1:01 p.m.

CVE-2013-4811

2013-09-1613:01:46
CWE-20
[email protected]
web.nvd.nist.gov
4

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.965

Percentile

99.6%

JSON

UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-1743.

Affected configurations

NVD
Node
hpidentity_driven_managerMatch4.0
OR
hpprocurve_managerMatch3.20
OR
hpprocurve_managerMatch3.20plus
OR
hpprocurve_managerMatch4.0
OR
hpprocurve_managerMatch4.0plus

Related

zdi 1
prion 1
zdt 1
dsquare 1
cvelist 1
packetstorm 1
cve 1
d2 1
checkpoint_advisories 1
securityvulns 4
zdi
zdi
HP PCM+ SNAC Registration Server UpdateDomainControllerServlet Remote Code Execution Vulnerability
2013-09-11 00:00:00
prion
prion
Design/Logic Flaw
2013-09-16 13:01:00
zdt
zdt
HP ProCurve Manager SNAC UpdateDomainControllerServlet File Upload
2013-09-17 00:00:00
dsquare
dsquare
HP PCM+ SNAC Registration Server UpdateDomainControllerServlet File Upload
2013-10-10 00:00:00
cvelist
cvelist
CVE-2013-4811
2013-09-13 18:00:00
packetstorm
packetstorm
HP ProCurve Manager SNAC UpdateDomainControllerServlet File Upload
2013-09-17 00:00:00
cve
cve
CVE-2013-4811
2013-09-16 13:01:46
d2
d2
DSquare Exploit Pack: D2SEC_HPPCM2
2013-09-16 13:01:00
checkpoint_advisories
checkpoint_advisories
HP ProCurve Manager SNAC UpdateDomainControllerServlet Code Execution (CVE-2013-4811)
2013-10-27 00:00:00
securityvulns
securityvulns
[security bulletin] HPSBPV02918 rev.1 - HP ProCurve Manager (PCM), HP PCM+ and HP Identity Driven Manager (IDM), SQL Injection, Remote Code Execution, Session Reuse
2013-09-11 00:00:00
HP ProCurve Manager, HP Identity Driven Manager multiple security vulnerabilities
2013-09-11 00:00:00
HP ProCurve Manager multiple security vulnerabilities
2014-01-08 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.965

Percentile

99.6%

JSON
Related for NVD:CVE-2013-4811
zdi1prion1zdt1dsquare1cvelist1packetstorm1cve1d21checkpoint_advisories1securityvulns4