CVE-2004-1857 Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. (dot dot) in the setinclude parameter.
LowCVSS 2.1
EPSS 86.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. (dot dot) in the setinclude parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc web jetadmin | = 7.5.2546 | No fix listed |
References
- 20040324 HP Web JetAdmin vulnerabilities. mailing-list
- SSRT4700 vendor-advisory
- 9972 exploit vdb-entry vendor-advisory
- hp-jetadmin-setinfo-directory-traversal(15606) vdb-entry