CVE-2013-6221

Published Jun 18, 2014

Last updated 3 months ago

Overview

Description: Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-2031.
Source: hp-security-alert@hp.com
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-22

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:hp:service_virtualization:3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "80C0360A-8AA0-410F-BA9B-3166FD7246DE"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References