Lucene search

K
cve[email protected]CVE-2011-4788
HistoryJan 13, 2012 - 4:14 a.m.

CVE-2011-4788

2012-01-1304:14:00
CWE-22
web.nvd.nist.gov
68
cve-2011-4788
absolute path traversal
web interface
hp storageworks
p2000 g3 msa
vulnerability
remote attackers
arbitrary files
uri
nvd

6.5 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.084 Low

EPSS

Percentile

94.4%

Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary files via a pathname in the URI.

6.5 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.084 Low

EPSS

Percentile

94.4%