[security bulletin] HPSBMU02948 rev.1 - HP Systems Insight Manager (SIM) Running on Linux and Windows, Remote Execution of Arbitrary Code, Denial of Service (DoS), Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04039150 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04039150 Version: 1 HPSBMU02948 rev....

HP Systems Insight Manager < 7.2 Multiple Vulnerabilities

The version of HP Systems Insight Manager installed on the remote Windows host is affected by vulnerabilities in the included Flash components. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid72963;...

HP Systems Insight Manager < 7.3 Multiple Vulnerabilities

The version of HP Systems Insight Manager installed on the remote Windows host is affected by vulnerabilities in the included Flash components. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72964; scriptversion"1.7"; scriptcvsdate"Date: 2018/11/15 20:50:27";...

HP Onboard Administrator Detection

HP Onboard Administrator was found. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70140; scriptversion"1.3"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"HP Onboard Administrator Detection"; scriptsummaryenglish:"Check XML data response.";...

CVE-2012-1995

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows local users to obtain sensitive information or modify data via unknown vectors...

CVE-2012-1997

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1998...

CVE-2012-1998

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1997...

CVE-2012-1999

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors...

CVE-2012-1996

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to modify data via unknown vectors...

Code injection

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows local users to obtain sensitive information or modify data via unknown vectors...

Code injection

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1997...

Code injection

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors...

Code injection

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to modify data via unknown vectors...

Code injection

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1998...

CVE-2012-1998

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-1997...

CVE-2012-1995

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows local users to obtain sensitive information or modify data via unknown vectors...

CVE-2012-1995

CVE-2012-1995 concerns HP Systems Insight Manager (SIM) prior to version 7.0. The available documents describe an unspecified vulnerability enabling local users to obtain sensitive information or modify data via unknown vectors. The exact root cause, vulnerable components, affected configurations...

CVE-2012-1996

CVE-2012-1996 concerns HP Systems Insight Manager (SIM) prior to version 7.0. The vulnerability is described as an unspecified issue that allows remote attackers to modify data via unknown vectors. The available connected documents confirm the affected product and version range, but do not disclo...

CVE-2012-1996

Unspecified vulnerability in HP Systems Insight Manager SIM before 7.0 allows remote attackers to modify data via unknown vectors...

CVE-2012-1997

Technical details for CVE-2012-1997 are not publicly provided in the supplied documents. No concrete vulnerable component, impact, or remediation is described here. Monitor for updates in official advisories and vendor notices to obtain specific information.