CVE-2008-4560
Published Feb 8, 2009
Last updated 5 years ago
Overview
- Description
- HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to obtain sensitive information via (1) a crafted request to the nnmRptConfig.exe CGI program, which reveals the pathname of log directories; or (2) a crafted parameter in a request to the ovlaunch.exe CGI program, which reveals configuration details. NOTE: this issue may be partially covered by CVE-2009-0205.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.8
- Impact score
- 6.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A54C04BC-7EA3-412B-B509-414BBC942E92"
},
{
"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EFF07E8-239D-413D-90DB-E3153232D73C"
},
{
"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D506AC90-5383-4221-BBC8-7AF34D62C929"
},
{
"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16BAE549-664A-47D1-8355-EA63B1BCFD4A"
},
{
"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6692E05F-4864-449F-8A52-9001028D8C44"
},
{
"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D"
},
{
"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC1DA299-A180-4078-9172-67D116840D29"
},
{
"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FED610E9-7639-48FE-8B4F-B394A7EEC7C9"
},
{
"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1935DA4-A1AF-4867-BCB1-F5BB75360702"
},
{
"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "769ED1A5-C3C5-404E-8040-655D69C2AA88"
},
{
"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "186EFE05-AC1C-48FF-91B7-0CCD49FEABCC"
},
{
"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5CE1F56-FA80-416D-8F42-C1C291F0965C"
}
],
"operator": "OR"
}
]
}
]