CVE-2010-0447 The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbit...
HighCVSS 10.0
EPSS 5.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc openview performance insight | <= 5.4 | No fix listed |
References
- HPSBMA02489 vendor-advisory
- 62797 vdb-entry
- 38899 third-party-advisory vendor-advisory
- 20100309 ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability mailing-list
- 38611 vdb-entry
- ADV-2010-0555 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- hp-performance-unspec-command-exec(56757) vdb-entry