Lucene search
HistoryJun 19, 2014 - 10:50 a.m.
CVE-2014-2609
cve-2014-2609
java
glassfish
admin console
hp executive scorecard
remote code execution
authentication
tcp port 10001
zdi-can-2116
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.572 Medium
EPSS
Percentile
97.7%
The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to execute arbitrary code via a session on TCP port 10001, aka ZDI-CAN-2116.
Affected configurations
Node
hpexecutive_scorecardMatch9.40
ORhpexecutive_scorecardMatch9.41
| CPE | Name | Operator | Version |
|---|---|---|---|
| hp:executive_scorecard | hp executive scorecard | eq | 9.40 |
| hp:executive_scorecard | hp executive scorecard | eq | 9.41 |
Related
nvd
nvd
CVE-2014-2609
2014-06-19 10:50:04
prion
prion
Authentication flaw
2014-06-19 10:50:00
cvelist
cvelist
CVE-2014-2609
2014-06-19 10:00:00
zdi
zdi
securityvulns
securityvulns
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.572 Medium
EPSS
Percentile
97.7%
Related for CVE-2014-2609