HP Application Information Optimizer security vulnerabilities

Code execution, information disclosure...

[security bulletin] HPSBMU02971 rev.1 - HP Application Information Optimizer, Remote Execution of Code, Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04140965 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04140965 Version: 1 HPSBMU02971 rev....

[security bulletin] HPSBMU02966 rev.1 - HP Operations Orchestration, Unauthorized Access to Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04125866 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04125866 Version: 1 HPSBMU02966 rev....

HP StoreVirtual code execution

No description provided...

HP Service Manager multiple security vulnerabilities

Cross-Site Scripting XSS, Cross-Site Request Forgery CSRF, Remote Denial of Service DoS, Execution of Arbitrary Code, Unauthorized Access, Disclosure of Information and Authentication Issues...

[security bulletin] HPSBST02937 rev.1 - HP StoreVirtual 4000 and StoreVirtual VSA Software dbd_manager, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03995204 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03995204 Version: 1 HPSBST02937 rev....

HP LoadRunner Virtual User Generator EmulationAdmin Directory Traversal (CVE-2013-4837)

Multiple directory traversal vulnerabilities exist in HP LoadRunner. These vulnerabilities are due to a lack of input validation on SOAP requests, specifically, the copyFileToServer and the getFileContentAsLines operations of the EmulationAdmin web service. Unauthenticated remote attackers could...

HP Application Information Optimizer任意代码执行漏洞

Bugtraq ID:65766 CVE ID:CVE-2013-6203 HP Application Information Optimizer数据库软件可用智能数据管理和存储将结构化数据占用空间降至最低,并实现应用信息价值最大化。 HP Application Information Optimizer WEB控制台组件存在未明漏洞，允许远程攻击者利用漏洞执行任意代码。 0 HP Application Information Optimizer 7.1 HP Application Information Optimizer 7.0 HP Application...

HP LoadRunner Virtual User Generator saveCodeRuleFile Directory Traversal (CVE-2013-4838)

A directory traversal vulnerability exists in HP LoadRunner Virtual User Generator. The vulnerability exists in the EmulationAdmin web service. The vulnerability is due to insufficient validation on the parameters of saveCodeRuleFile method sent via SOAP requests. A remote unauthenticated attacke...

HP StoreVirtual 4000/StoreVirtual VSA dbd_manager任意代码执行漏洞

Bugtraq ID:65770 CVE ID:CVE-2013-4841 HP StoreVirtual Storage是一个适用于虚拟化环境的横向扩展存储，支持所有业务的虚拟化需求。 HP StoreVirtual 4000和StoreVirtual VSA所使用的LeftHand OS相关dbdmanager存在一个未明错误，允许远程攻击者利用漏洞执行任意代码。 0 HP LeftHand OS 10.x HP StoreVirtual 4000 Storage HP StoreVirtual VSA 厂商补丁： HP ----- HP LeftHand OS version...

HP Application Information Optimizer敏感信息泄漏漏洞

Bugtraq ID:65764 CVE ID:CVE-2013-6204 HP Application Information Optimizer数据库软件可用智能数据管理和存储将结构化数据占用空间降至最低,并实现应用信息价值最大化。 HP Application Information Optimizer WEB控制台组件存在未明漏洞，允许远程攻击者利用漏洞获取部分敏感数据。 0 HP Application Information Optimizer 7.1 HP Application Information Optimizer 7.0 HP Application...

CVE-2013-6203

The Web Console in HP Application Information Optimizer formerly HP Database Archiving 6.2, 6.3, 6.4, 7.0, and 7.1 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, aka ZDI-CAN-1656...

CVE-2013-6204

The Web Console in HP Application Information Optimizer formerly HP Database Archiving 6.2, 6.3, 6.4, 7.0, and 7.1 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, aka ZDI-CAN-2004...

Design/Logic Flaw

Unspecified vulnerability in dbdmanager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Software formerly LeftHand Virtual SAN Appliance allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1509...

Code injection

The Web Console in HP Application Information Optimizer formerly HP Database Archiving 6.2, 6.3, 6.4, 7.0, and 7.1 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, aka ZDI-CAN-2004...

Code injection

The Web Console in HP Application Information Optimizer formerly HP Database Archiving 6.2, 6.3, 6.4, 7.0, and 7.1 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, aka ZDI-CAN-1656...

CVE-2013-6204

HP Application Information Optimizer Web Console (versions 6.2–7.1) contains a vulnerability that allows remote attackers to execute arbitrary code and disclose information. ZDI-14-041 attributes the flaw to the password reset functionality, enabling an attacker to reset a random account’s passwo...

CVE-2013-4841

HP StoreVirtual 4000 and StoreVirtual VSA Software (LeftHand OS) suffer a remote code execution in the dbd_manager component prior to LeftHand OS 11.0. The vulnerability (CVE-2013-4841) allows unauthenticated, remote attackers to execute arbitrary code with root privileges by sending crafted mess...

CVE-2013-4841

Unspecified vulnerability in dbdmanager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Software formerly LeftHand Virtual SAN Appliance allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1509...

CVE-2013-6204

The Web Console in HP Application Information Optimizer formerly HP Database Archiving 6.2, 6.3, 6.4, 7.0, and 7.1 allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors, aka ZDI-CAN-2004...