CVE-2016-4360

The CVE-2016-4360 issue affects Hewlett Packard Enterprise LoadRunner/Performance Center components (notably the Virtual Table Server import_csv feature). The root cause is that web/admin/data.js in the VTS component does not restrict file paths sent to unlink, enabling an unauthenticated remote ...

Hewlett Packard Enterprise LoadRunner Virtual Table Server import_csv Denial of Service Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Hewlett Packard Enterprise LoadRunner. Authentication is not required to exploit this vulnerability. The specific flaw exists within the importcsv functionality. The issue lies in the failure to...