CVE-2007-2719

CVE-2007-2719 affects HP Systems Insight Manager (SIM) versions 4.2 and 5.0 SP4/SP5. The vulnerability is a session fixation flaw that allows remote attackers to hijack web sessions by setting the JSESSIONID cookie. Documented impact is complete confidentiality, integrity, and availability compro...

CVE-2007-2719

Session fixation vulnerability in HP Systems Insight Manager SIM 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie...

CVE-2007-2719: Improper Authentication

Session fixation vulnerability in HP Systems Insight Manager SIM 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie...

Directory traversal

Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers to access arbitrary files via unspecified vectors, a different vulnerability than CVE-2005-2006...

CVE-2006-0656

Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers to access arbitrary files via unspecified vectors, a different vulnerability than CVE-2005-2006...

CVE-2006-0656

Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers to access arbitrary files via unspecified vectors, a different vulnerability than CVE-2005-2006...

HP Systems Insight Manager directory traversal

Multiple vulnerabilities allow to obtain any file from server...

CVE-2006-0656: Undefined Security Weakness

Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers to access arbitrary files via unspecified vectors, a different vulnerability than CVE-2005-2006...

[security bulletin] SSRT061108 rev.2 - HP Systems Insight Manager Remote Unauthorized Access - Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00597967 Version: 2 HPSBMA02096 SSRT061108 rev.2 - HP Systems Insight Manager Remote Unauthorized Access - Directory Traversal NOTICE: The information in this Security Bulletin should be acted up...

HP Systems Insight Manager Namazu lang Parameter Traversal Arbitrary File Access

The remote host appears to be running HP Systems Insight Manager SIM, a unified infrastructure management tool. The version of HP SIM on the remote host includes a version of the search engine Namazu that reportedly fails to validate user input to the 'lang' parameter of the 'namazucgi' script. A...

CVE-2005-3983

Unknown vulnerability in the login page for HP Systems Insight Manager SIM 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service browser hang. NOTE: although the advisory is vague, this issue does not appear to involve an attacker at all. ...

CVE-2005-3983

CVE-2005-3983 describes an unknown vulnerability in the login page of HP Systems Insight Manager (SIM) 4.0 and 4.1 when accessed through Microsoft Internet Explorer with the MS04-025 patch , resulting in a denial of service (browser hang) . The advisory is vague and the connected documents do not...

CVE-2005-3983

Unknown vulnerability in the login page for HP Systems Insight Manager SIM 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service browser hang. NOTE: although the advisory is vague, this issue does not appear to involve an attacker at all. ...

CVE-2005-3983: Undefined Security Weakness

Unknown vulnerability in the login page for HP Systems Insight Manager SIM 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service browser hang. NOTE: although the advisory is vague, this issue does not appear to involve an attacker at all. ...