[security bulletin] HPSBMA02433 SSRT090084 rev.1 - HP Discovery & Dependency Mapping Inventory (DDMI) Running on Windows, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01760771 Version: 1 HPSBMA02433 SSRT090084 rev.1 - HP Discovery & Dependency Mapping Inventory DDMI Running on Windows, Remote Unauthorized Access NOTICE: The information in this Security Bulleti...

CVE-2009-1419

HP DDMI on Windows (DDMI 2.0.0–2.52, 7.50, 7.51) contains an authentication/validation flaw in the agent: it does not verify the SSL certificate from a known DDMI server before processing requests, enabling a remote, unauthenticated attacker to access DDMI agents and potentially disclose software...