Skip to content

CVE-2014-7883 HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response.

MediumCVSS 5.0 EPSS 37.0% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response.

Affected products

ProductAffected versionsFixed in
HP Inc universal configuration management database = 9.05 No fix listed
HP Inc universal configuration management database = 10.01 No fix listed
HP Inc universal configuration management database = 10.11 No fix listed

References

  • VU#867593 third-party-advisory us-government-resource
  • 1031688 third-party-advisory vdb-entry
  • HPSBMU03239 not-applicable vendor-advisory