HP Intelligent Management Center SOM Module < 7.0 E0101 Multiple Vulnerabilities

The version of the HP Intelligent Management Center Service Operation Management Software Module on the remote is prior to 7.0 E0101. It is therefore, potentially affected by multiple vulnerabilities : - An authentication bypass vulnerability exists in the 'euAccountService' servlet that allows...

HP Intelligent Management Center BIMS Module Information Disclosure

The HP Intelligent Management Center IMC application running on the remote host is affected by an information disclosure vulnerability in the included IMC Branch Intelligent Management System BIMS Module, specifically within the bimsDownload servlet, due to a failure to require authentication. An...

HP Intelligent Management Center APM Module < 7.0 E0101 SQL Injection

The version of the HP Intelligent Management Center Application Performance Manager Module on the remote host does not properly sanitize the 'monitorId' parameter in the 'AppDataDaoImpl' class, allowing for remote SQL injection attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

HP Intelligent Management Center Web Administration Interface Default Credentials

The web administration interface for the HP Intelligent Management Center IMC application running on the remote host uses a known set of default credentials. A remote attacker can exploit this to gain administrative access to the web interface. C Tenable Network Security, Inc. include"compat.inc"...

HP Intelligent Management Center Branch Intelligent Management Module Multiple Vulnerabilities

The version of the HP Intelligent Management Center Branch Intelligent Management System module on the remote host is a version prior to 5.2 E0401 and is potentially affected by multiple vulnerabilities : - The 'bimsDownload' servlet is not protected by authentication and could be used to access...

HP Intelligent Management Center < 7.0 E0102 DES / ECB Weak Decryption Key

The version of HP Intelligent Management Center on the remote host is affected by a vulnerability that could allow an attacker to gain access to administrative credentials. This is due to the fact that a static decryption key is used with DES in ECB mode to store the credentials. %NASLMINLEVEL...

HP Intelligent Management Center SOM euAccountSerivce Authentication Bypass (CVE-2013-4824)

An authentication bypass vulnerability exists in the SOM add-in module of HP Intelligent Management Center...

HP Intelligent Management Center Web Administration Interface Detection

Binary data hpimcwebinterfacedetect.nbin...

HP Intelligent Management Center SOM sdFileDownload Information Disclosure (CVE-2013-4826)

An information disclosure vulnerability has been reported in HP Intelligent Management Center Service Operation Management Software...

HP Intelligent Management Center BIMS UploadServlet Arbitrary File Upload (CVE-2013-4822)

A code execution vulnerability exists in the Branch Intelligent Management Software BIMS module of Intelligent Management Center...

HP Intelligent Management SOM FileDownloadServlet Arbitrary Download

This module exploits a lack of authentication and access control in HP Intelligent Management, specifically in the FileDownloadServlet from the SOM component, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on HP Intelligent Management Center...

HP Intelligent Management Center BIMS bimsDownload Information Disclosure (CVE-2013-4823)

An information disclosure vulnerability has been reported in the BIMS add-in module of HP Intelligent Management Center.The vulnerability is due to lack of authentication and insufficient input validation in the bimsDownload servlet when processing HTTP request parameters. Remote attackers can...

HP Intelligent Management Center BIMS UploadServlet Directory

This Metasploit module exploits a directory traversal vulnerability on the version 5.2 of the BIMS component from the HP Intelligent Management Center. The vulnerability exists in the UploadServlet, allowing the user to download and upload arbitrary files. This Metasploit module has been tested...

HP Intelligent Management Center BIMS UploadServlet Directory Traversal

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 /Apache-Coyote/ include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper def initializeinfo = superupdateinfoinfo,...

HP Intelligent Management BIMS DownloadServlet Directory Traversal

This module exploits a lack of authentication and a directory traversal in HP Intelligent Management, specifically in the DownloadServlet from the BIMS component, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on HP Intelligent Management...

Hewlett-Packard Intelligent Management Center BIMS UploadServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UploadServlet in the Branch Intelligent Management...

Hewlett-Packard Intelligent Management Center CommonUtils Static DES/ECB Decryption Key Vulnerability

This vulnerability allows remote attackers to obtain sensitive information on vulnerable installations of Hewlett-Packard Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CommonUtil class. This application uses a stat...

Hewlett-Packard Intelligent Management Center APM monitorId SQL Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the APM module's AppDataDaoImpl class. The monitorId parameter does n...

Hewlett-Packard Intelligent Management Center SOM euAccountService Servlet Authentication Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOM's euAccountService servlet. No authentication is required to...

CVE-2013-4823

Unspecified vulnerability in HP Intelligent Management Center iMC and HP IMC Branch Intelligent Management System Software Module aka BIMS allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1607...