CVE-2013-2352

LeftHand OS aka SAN iQ 10.5 and earlier on HP StoreVirtual Storage devices does not provide a mechanism for disabling the HP Support challenge-response root-login feature, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of an unused one-time...

[security bulletin] HPSBST02896 rev.1 - HP StoreVirtual Storage, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03825537 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03825537 Version: 1 HPSBST02896 rev....

CVE-2013-2352

CVE-2013-2352 affects LeftHand OS (San iQ) 10.5 and earlier on HP StoreVirtual Storage devices. The vulnerability stems from an HP Support challenge-response root-login mechanism that cannot be disabled, potentially allowing remote attackers to gain administrative access by leveraging knowledge o...