| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
| CVE-2013-4824 | 29 May 201815:50 | – | circl | |
| HP Intelligent Management Center SOM euAccountSerivce Authentication Bypass (CVE-2013-4824) | 22 Dec 201300:00 | – | checkpoint_advisories | |
| CVE-2013-4824 | 13 Oct 201310:00 | – | cvelist | |
| HP Intelligent Management Center SOM Module < 7.0 E0101 Multiple Vulnerabilities | 9 Jan 201400:00 | – | nessus | |
| HP Intelligent Management SOM Account Creation | 23 Oct 201321:01 | – | metasploit | |
| CVE-2013-4824 | 13 Oct 201310:20 | – | nvd | |
| HP Intelligent Management SOM Account Creation | 31 Aug 202400:00 | – | packetstorm | |
| 📄 HP Intelligent Management 5.1 E0201 Account Creation | 27 Nov 202500:00 | – | packetstorm | |
| Authentication flaw | 13 Oct 201310:20 | – | prion | |
| CVE-2013-4824 | 22 May 202511:12 | – | redhatcve |
| Source | Link |
|---|---|
| h20564 | www.h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| unflattenKeylistIntoAnswers('default','safari') extraction key | path | servicedesk/servicedesk/servicedesk.nocache.js | Obtain service desk strong name used in subsequent RPC to create account | CWE-287 |
| accountSerivce.gwtsvc strong name extraction | path | servicedesk/servicedesk/{serviceDesk}.cache.html | Obtain account service strong name required for the RPC call to add an account | CWE-287 |
| method | request body | servicedesk/servicedesk/accountSerivce.gwtsvc | RPC call to create a new account (vulnerability exploitation via authentication bypass / account creation) | CWE-287 |
| uri | request body | servicedesk/servicedesk/accountSerivce.gwtsvc | RPC call to create a new account (vulnerability exploitation via authentication bypass / account creation) | CWE-287 |
| ctype | request body | servicedesk/servicedesk/accountSerivce.gwtsvc | RPC call to create a new account (vulnerability exploitation via authentication bypass / account creation) | CWE-287 |
| headers | request body | servicedesk/servicedesk/accountSerivce.gwtsvc | RPC call to create a new account (vulnerability exploitation via authentication bypass / account creation) | CWE-287 |
| data | request body | servicedesk/servicedesk/accountSerivce.gwtsvc | RPC call to create a new account (vulnerability exploitation via authentication bypass / account creation) | CWE-287 |
| addAccount | request body | servicedesk/servicedesk/accountSerivce.gwtsvc | RPC call to create a new account (vulnerability exploitation via authentication bypass / account creation) | CWE-287 |
| username | request body | servicedesk/servicedesk/accountSerivce.gwtsvc | RPC call to create a new account (vulnerability exploitation via authentication bypass / account creation) | CWE-287 |
| password | request body | servicedesk/servicedesk/accountSerivce.gwtsvc | RPC call to create a new account (vulnerability exploitation via authentication bypass / account creation) | CWE-287 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation