Multiple vulnerabilities in HP Insight Diagnostics

Beschreibung

Multiple critical vulnerabilities have been found in HP Insight Diagnostics. Malicious users can exploit these vulnerabilities to inject code or write local files. Below is a complete list of vulnerabilities

1. Improper PHP include restrictions can be exploited via a path parameter;
2. A path traversal vulnerability can be exploited remotely via a devicePath parameter;
3. Unknown vectors can be exploited remotely.

Ursprüngliche Informationshinweise

CVE Liste

• CVE-2013-3573
  critical
• CVE-2013-3574
  critical
• CVE-2013-3575
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com