Directory traversal

2014-06-1910:50:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.7%

JSON

Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or delete data, via unspecified vectors, aka ZDI-CAN-2120.

CPENameOperatorVersion
executive_scorecardeq9.40
executive_scorecardeq9.41

CPE	Name	Operator	Version
	executive_scorecard	eq	9.40
	executive_scorecard	eq	9.41

References

secunia.com/advisories/59363

www.securityfocus.com/bid/68093

www.securitytracker.com/id/1030439

zerodayinitiative.com/advisories/ZDI-14-210/

h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295