Lucene search
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.HP_DEVICE_MANAGER_RMI_UNAUTHENTICATED.NBINHistoryOct 09, 2020 - 12:00 a.m.
HP Device Manager Unauthenticated 'HPDM Server RMI' SQLi (CVE-2020-6926) (remote)
2020-10-0900:00:00
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
58
The HP Device Manager Server RMI object ‘HPDM Server RMI’ listening on the remote Windows host does not enforce client certificate validation. It is, therefore, affected by an unauthenticated RMI object call vulnerability that can allow an unauthenticated remote attacker to inject HQL that injects SQL that will run on the bundled PostgreSQL database.
Binary data hp_device_manager_rmi_unauthenticated.nbin| Vendor | Product | Version | CPE |
|---|---|---|---|
| hp | hp_device_manager | x-cpe:/a:hp:hp_device_manager |
Related
cve
cve
CVE-2020-6926
2022-02-25 11:32:11
nessus
nessus
HP Device Manager 4.x < 4.7 SP 13 / 5.x < 5.0.4 Multiple Vulnerabilities
2020-10-07 00:00:00
attackerkb
attackerkb
Multiple vulnerabilities in HP Device Manager
2020-10-06 00:00:00
hp
hp
rapid7blog
rapid7blog
Related for HP_DEVICE_MANAGER_RMI_UNAUTHENTICATED.NBIN