CVE-2012-2986: Improper Neutralization of Special Elements used in an OS Command

lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the 1 first, 2 third, or 3 fourth parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4361...

PT-2012-5358

Name of the Vulnerable Software and Affected Versions HP Virtual SAN Appliance version prior to 9.5 Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter of the 'lhn/public/network/ping' endpoint. Recommendations For...

PT-2012-4416

Name of the Vulnerable Software and Affected Versions HP SAN/iQ version 9.5 on the HP Virtual SAN Appliance Description The issue allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain parameters. This is due to an incomplete fix for a previous issue...

CVE-2012-4361: Improper Neutralization of Special Elements used in an OS Command

lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter...