CVE-2015-2121 HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2) NetworkEdit...
HighCVSS 7.8
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2) NetworkEditorController component, aka ZDI-CAN-2569.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc network virtualization | = 8.61 | No fix listed |
| HP Inc network virtualization | = 11.52 | No fix listed |
References
- 74583 vdb-entry
- zerodayinitiative.com
- SSRT101932 vendor-advisory