CVE-2011-0276

Published Feb 2, 2011

Last updated 6 years ago

Overview

Description: HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet class.
Source: hp-security-alert@hp.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:hp:openview_performance_insight:5.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B5AEB80B-EB6D-421F-BEA7-C7FC28F8A0BF"
          },
          {
            "criteria": "cpe:2.3:a:hp:openview_performance_insight:5.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DA023DF9-4535-4F1C-972F-B68D6EC9B59B"
          },
          {
            "criteria": "cpe:2.3:a:hp:openview_performance_insight:5.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7AE99E6B-2B59-4246-805C-86FEBA7D31EC"
          },
          {
            "criteria": "cpe:2.3:a:hp:openview_performance_insight:5.31:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "10AC228A-7F20-48B9-9C50-6F975129F719"
          },
          {
            "criteria": "cpe:2.3:a:hp:openview_performance_insight:5.41:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DD031040-0A76-4A37-B2F9-A89FB224D6BB"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References