[security bulletin] HPSBMU02971 rev.1 - HP Application Information Optimizer, Remote Execution of Code, Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04140965 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04140965 Version: 1 HPSBMU02971 rev....

CVE-2013-6204

HP Application Information Optimizer Web Console (versions 6.2–7.1) contains a vulnerability that allows remote attackers to execute arbitrary code and disclose information. ZDI-14-041 attributes the flaw to the password reset functionality, enabling an attacker to reset a random account’s passwo...