[security bulletin] HPSBMU02815 SSRT100715 rev.3 - HP SiteScope SOAP Security Issues, Remote Disclosure of Information, Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03489683 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03489683 Version: 3 HPSBMU02815...

CVE-2012-3261

CVE-2012-3261 affects HP SiteScope versions 11.10–11.12, where a vulnerable SOAP call using APIPreferenceImpl enables remote code execution. The SAINT entries describe a Security Bypass/Remote Code Execution path via the SOAP API, with HP confirming vulnerable versions and recommending upgrading ...