PT-2013-4486

Name of the Vulnerable Software and Affected Versions HP Insight Diagnostics version 9.4.0.4710 Description The issue allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath also known as mount parameter in the saveCompareConfig.php file. Thi...

CVE-2013-3574: Improper Input Validation

Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath aka mount parameter...