[security bulletin] HPSBMU03064 rev.1 - HP Universal CMDB, Remote Information Disclosure, Execution of Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04357076 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04357076 Version: 1 HPSBMU03064 rev....

CVE-2014-2617

HP Universal CMDB versions 10.01 and 10.10 are affected by CVE-2014-2617, a remote code execution/ information disclosure vulnerability. The HP Security Bulletin HPSBMU03064 rev.1 attributes this to remote access with default configuration and, per companion advisories, hard-coded credentials tha...