258 matches found
CVE-2017-14349
An authentication vulnerability in HPE SiteScope product versions 11.2x and 11.3x, allows read-only accounts to view all SiteScope interfaces and monitors, potentially exposing sensitive data...
HP SiteScope Monitors Remote Code Execution Vulnerability
HP SiteScope Monitors is a platform-level management software. A remote code execution vulnerability exists in HP SiteScope Monitors. This allows an attacker to execute arbitrary code within the context of the affected application...
HP SiteScope Monitors Local Bypass Security Restrictions Vulnerability
HP SiteScope Monitors is a platform-level management software. A local bypass security restriction vulnerability exists in HP SiteScope Monitors. This allows an attacker to exploit the vulnerability to gain access to sensitive information...
HP SiteScope Monitors Information Disclosure Vulnerability (CNVD-2017-22538)
HP SiteScope Monitors is a platform-level management software. An information disclosure vulnerability exists in HP SiteScope Monitors. The vulnerability can be exploited by an attacker to obtain sensitive information...
HP SiteScope Monitors Information Disclosure Vulnerability
HP SiteScope Monitors is a platform-level management software. An information disclosure vulnerability exists in HP SiteScope Monitors. The vulnerability can be exploited by an attacker to obtain sensitive information...
HP SiteScope Multiple Vulnerabilities (HPESBGN03763)
The version of HP SiteScope running on the remote host is 11.2x or 11.3x. It is, therefore, affected by multiple vulnerabilities : - A cryptographic weakness exists in the sspu.jar library due to the use of hard-coded encryption keys. A local attacker can exploit this to disclose potentially...
HPESBGN03763 rev.1 - HPE SiteScope, Disclosure of Sensitive Information, Bypass Security Restriction, Remote Arbitrary Code Execution
Potential Security Impact: Local: Bypass Security Restrictions, Disclosure of Sensitive Information; Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP SiteScope Monitors Software Series - v11.2x, v11.3x CVSS Scores: | CVE | CVSS Vector | Base Scor...
HP SiteScope Multiple Vulnerabilities
HP SiteScope is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:hp:sitescope"; ifdescription...
HPE SiteScope contains multiple vulnerabilities
Overview HPE's SiteScope is vulnerable to several cryptographic issues, insufficiently protected credentials, and missing authentication. Description HPE's SiteScope is vulnerable to several vulnerabilities. The researcher reports that version 11.31.461 is affected; other versions may also be...
HP SiteScope Remote Privilege Escalation Vulnerability
HP SiteScope is prone to remote privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:hp:sitescope"...
The vulnerability of the HP SiteScope computing resource monitoring system allows a perpetrator to increase their privileges.
The vulnerability of the HP SiteScope computing resource monitoring system lies in the lack of access control for certain functions. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
HP SiteScope DNS Tool Command Injection
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/powershell' class Metasploit3 'HP SiteScope DNS Tool Command Injection', 'Description' = %q This module exploits a command...
HP SiteScope DNS Tool Command Injection Exploit
This Metasploit module exploits a command injection vulnerability discovered in HP SiteScope 11.30 and earlier versions tested in 11.26 and 11.30. The vulnerability exists in the DNS Tool allowing an attacker to execute arbitrary commands in the context of the service. By default, HP SiteScope...
HP SiteScope DNS Tool Command Injection
This module exploits a command injection vulnerability discovered in HP SiteScope 11.30 and earlier versions tested in 11.26 and 11.30. The vulnerability exists in the DNS Tool allowing an attacker to execute arbitrary commands in the context of the service. By default, HP SiteScope installs and...
HP SiteScope Log Analyzer Information Disclosure (CVE-2015-2120)
A privilege escalation vulnerability exists in HP SiteScope. The vulnerability is due to improper validation of the log path, allowing the user to read the users.config file. A remote, authenticated attacker may exploit this vulnerability by submitting a crafted log path...
HP SiteScope Installation Detection
Binary data hpsitescopeinstalled.nbin...
HP SiteScope Log Analysis Tool Remote Privilege Escalation (credentialed check)
The HP SiteScope application installed on the remote host is affected by a privilege escalation vulnerability due to a failure to restrict the log path within the Log Analysis Tool. A remote, authenticated attacker can exploit this flaw to read the 'users.config' file, allowing an attacker to...
HP SiteScope Log Analysis Tool Remote Privilege Escalation (uncredentialed check)
The HP SiteScope application running on the remote host is affected by a privilege escalation vulnerability due to a failure to restrict the log path within the Log Analysis Tool. A remote, authenticated attacker can exploit this flaw to read the 'users.config' file, allowing an attacker to...
[security bulletin] HPSBGN03325 rev.1 - HP SiteScope, Remote Elevation of Privilege
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04688784 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04688784 Version: 1 HPSBGN03325 rev....