[security bulletin] HPSBMU02999 rev.1 - HP Software Autonomy WorkSite Server (On-Premises Software), Running OpenSSL, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04239374 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04239374 Version: 1 HPSBMU02999 rev....

HP Autonomy WorkSite Server v9.0

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04239374 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04239374 Version: 1 HPSBMU02999 rev....

CVE-2013-6212

Unspecified vulnerability in HP Database and Middleware Automation 10.0, 10.01, 10.10, and 10.20 before 10.20.100 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2013-6215

Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown vectors, aka ZDI-CAN-1977...

CVE-2013-6219

Unspecified vulnerability in HP HP-UX Whitelisting aka WLI before A.01.02.02 on HP-UX B.11.31 allows local users to bypass intended access restrictions via unknown vectors...

CVE-2013-6218

Unspecified vulnerability in HP Network Node Manager i NNMi 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in HP HP-UX Whitelisting aka WLI before A.01.02.02 on HP-UX B.11.31 allows local users to bypass intended access restrictions via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in HP Database and Middleware Automation 10.0, 10.01, 10.10, and 10.20 before 10.20.100 allows remote authenticated users to obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability in HP Network Node Manager i NNMi 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2013-6212

CVE-2013-6212 affects HP Database and Middleware Automation (DMA) server versions 10.0, 10.01, 10.10 and 10.20 prior to 10.20.100. The HP security bulletin notes a vulnerability that could be remotely exploited to disclose information to remote authenticated users due to an unspecified flaw in DM...

CVE-2013-6219

CVE-2013-6219 affects HP-UX Whitelisting (WLI) on HP-UX B.11.31 prior to A.01.02.02. The HP bulletin (SSRT101382) confirms a local vulnerability that could bypass access restrictions, enabling local integrity risks. The nominal impact is a local unauthorized access (CVE shown with base CVSSv2 3.8...

CVE-2013-6212

Unspecified vulnerability in HP Database and Middleware Automation 10.0, 10.01, 10.10, and 10.20 before 10.20.100 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2013-6215

Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown vectors, aka ZDI-CAN-1977...

CVE-2013-6218

Unspecified vulnerability in HP Network Node Manager i NNMi 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2013-6219

Unspecified vulnerability in HP HP-UX Whitelisting aka WLI before A.01.02.02 on HP-UX B.11.31 allows local users to bypass intended access restrictions via unknown vectors...

CVE-2013-6218

HP Network Node Manager I (NNMi) versions 9.0X, 9.1X, and 9.2X are affected by CVE-2013-6218. The security bulletin notes remote unauthorized access and arbitrary code execution via unknown vectors, with a CVSS v2 base score of 10.0. HP provides hotfixes to address the vulnerability for NNMi 9.0X...

CVE-2013-6215

HP Universal Configuration Management Database (CMDB) Integration Service vulnerability CVE-2013-6215 affects Integration Service components in HP UCMDB v10.01 and v10.10. The issue allows remote code execution via unknown vectors, reported as ZDI-CAN-1977. HP has provided patches to resolve the ...

CVE-2013-6213

Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 Patch 1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1833...

CVE-2013-6214

Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 9.05, 10.01, and 10.10 allows remote authenticated users to obtain sensitive information via unknown vectors, aka ZDI-CAN-2042...

Design/Logic Flaw

Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 9.05, 10.01, and 10.10 allows remote authenticated users to obtain sensitive information via unknown vectors, aka ZDI-CAN-2042...