HP Intelligent Management Center Web Administration Interface Default Credentials

The web administration interface for the HP Intelligent Management Center IMC application running on the remote host uses a known set of default credentials. A remote attacker can exploit this to gain administrative access to the web interface. C Tenable Network Security, Inc. include"compat.inc"...

HP Intelligent Management Center BIMS Module Information Disclosure

The HP Intelligent Management Center IMC application running on the remote host is affected by an information disclosure vulnerability in the included IMC Branch Intelligent Management System BIMS Module, specifically within the bimsDownload servlet, due to a failure to require authentication. An...

HP Intelligent Management Center APM Module < 7.0 E0101 SQL Injection

The version of the HP Intelligent Management Center Application Performance Manager Module on the remote host does not properly sanitize the 'monitorId' parameter in the 'AppDataDaoImpl' class, allowing for remote SQL injection attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

HP Intelligent Management Center SOM Module Information Disclosure

The HP Intelligent Management Center IMC application running on the remote host is affected by an information disclosure vulnerability in the included IMC Service Operation Management SOM Module, specifically within the FileDownload servlet, due to a failure to require authentication. An...

HP Intelligent Management Center SOM euAccountSerivce Authentication Bypass (CVE-2013-4824)

An authentication bypass vulnerability exists in the SOM add-in module of HP Intelligent Management Center...

HP Intelligent Management Center Web Administration Interface Detection

Binary data hpimcwebinterfacedetect.nbin...

HP Intelligent Management Center SOM sdFileDownload Information Disclosure (CVE-2013-4826)

An information disclosure vulnerability has been reported in HP Intelligent Management Center Service Operation Management Software...

HP Intelligent Management Center BIMS UploadServlet Arbitrary File Upload (CVE-2013-4822)

A code execution vulnerability exists in the Branch Intelligent Management Software BIMS module of Intelligent Management Center...

HP Intelligent Management SOM Account Creation

This module exploits a lack of authentication and access control in HP Intelligent Management, specifically in the AccountService RpcServiceServlet from the SOM component, in order to create a SOM account with Account Management permissions. This module has been tested successfully on HP...

HP Intelligent Management SOM FileDownloadServlet Arbitrary Download

This module exploits a lack of authentication and access control in HP Intelligent Management, specifically in the FileDownloadServlet from the SOM component, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on HP Intelligent Management Center...

HP Intelligent Management Center BIMS UploadServlet Directory Traversal

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 /Apache-Coyote/ include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper def initializeinfo = superupdateinfoinfo,...

HP Intelligent Management Center BIMS UploadServlet Directory

This Metasploit module exploits a directory traversal vulnerability on the version 5.2 of the BIMS component from the HP Intelligent Management Center. The vulnerability exists in the UploadServlet, allowing the user to download and upload arbitrary files. This Metasploit module has been tested...

HP Intelligent Management Center BIMS bimsDownload Information Disclosure (CVE-2013-4823)

An information disclosure vulnerability has been reported in the BIMS add-in module of HP Intelligent Management Center.The vulnerability is due to lack of authentication and insufficient input validation in the bimsDownload servlet when processing HTTP request parameters. Remote attackers can...

HP Intelligent Management BIMS DownloadServlet Directory Traversal

This module exploits a lack of authentication and a directory traversal in HP Intelligent Management, specifically in the DownloadServlet from the BIMS component, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on HP Intelligent Management...

HP Intelligent Management Center BIMS UploadServlet Directory Traversal

This module exploits a directory traversal vulnerability on the version 5.2 of the BIMS component from the HP Intelligent Management Center. The vulnerability exists in the UploadServlet, allowing the user to download and upload arbitrary files. This module has been tested successfully on HP...

CVE-2013-4822

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Branch Intelligent Management System Software Module aka BIMS allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606...

CVE-2013-4824

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-1644...

Code injection

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Branch Intelligent Management System Software Module aka BIMS allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1606...

Code injection

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647...

Sql injection

SQL injection vulnerability in HP Intelligent Management Center iMC and HP IMC Service Operation Management Software Module allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZDI-CAN-1664...