Multiple vulnerabilities in HP Insight Diagnostics

Описание

Multiple critical vulnerabilities have been found in HP Insight Diagnostics. Malicious users can exploit these vulnerabilities to inject code or write local files. Below is a complete list of vulnerabilities

1. Improper PHP include restrictions can be exploited via a path parameter;
2. A path traversal vulnerability can be exploited remotely via a devicePath parameter;
3. Unknown vectors can be exploited remotely.

Первичный источник обнаружения

Связанные продукты

• HP-Insight-Diagnostics

Список CVE

• CVE-2013-3573
  critical
• CVE-2013-3574
  high
• CVE-2013-3575
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com