Lucene search

K
hpHP Product Security Response TeamHP:C03128469
HistoryDec 20, 2011 - 12:00 a.m.

HPSBPI02732 SSRT100435 rev.2 - HP Managed Printing Administration, Remote Execution of Arbitrary Code and Other Vulnerabilities

2011-12-2000:00:00
HP Product Security Response Team
support.hp.com
6

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

Potential Security Impact

Remote execution of arbitrary code, directory traversal, creation and deletion of arbitrary files, unauthorized access to application database

VULNERABILITY SUMMARY

Potential security vulnerabilities have been identified with HP Managed Printing Administration. These vulnerabilities could be exploited remotely for execution of arbitrary code, directory traversal, creation and deletion of arbitrary files, and unauthorized access to the application database.

RESOLUTION

Download the HP Printer Administrator Resource Kit (in English).

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P