Multiple vulnerabilities in HP Insight Diagnostics

Описание

Multiple critical vulnerabilities have been found in HP Insight Diagnostics. Malicious users can exploit these vulnerabilities to inject code or write local files. Below is a complete list of vulnerabilities

1. Improper PHP include restrictions can be exploited via a path parameter;
2. A path traversal vulnerability can be exploited remotely via a devicePath parameter;
3. Unknown vectors can be exploited remotely.

Первичный источник обнаружения

Связанные продукты

• HP-Insight-Diagnostics

Список CVE

• CVE-2013-3573
  critical
• CVE-2013-3574
  critical
• CVE-2013-3575
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com