CVE-2014-2602

HP OneView CVE-2014-2602 describes a remote privilege-escalation vulnerability affecting HP OneView versions 1.0 and 1.01, exploitable by remote authenticated users via unknown vectors. A fix is provided in HP OneView 1.05 and later via the Update Appliance mechanism; upgrading is advised for aff...

CVE-2014-2602

Unspecified vulnerability in HP OneView 1.0 and 1.01 allows remote authenticated users to gain privileges via unknown vectors...

CVE-2014-2602: Undefined Security Weakness

Unspecified vulnerability in HP OneView 1.0 and 1.01 allows remote authenticated users to gain privileges via unknown vectors...

HP OneView privilege escalation

No description provided...

[security bulletin] HPSBGN03034 rev.1 - HP OneView, Remote Elevation of Privileges

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04273152 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04273152 Version: 1 HPSBGN03034 rev....

CA Oneview Monitor DoSave.jsp Path Manipulation

Minded Security Labs: Advisory MSA100410 CA Oneview Monitor "DoSave.jsp" path manipulation Tested Versions: This advisory is intended for CA Netegrity Siteminder Policy Manager 6.x with Netegrity Oneview monitor installed. Minded Security ReferenceID: MSA100410 Credits: Discovery by Giorgio Fedon...

Computer Associates Oneview Monitor 6.0 - doSave.jsp Remote Code Execution

Computer Associates Oneview Monitor 6.0 - doSave.jsp Remote Code Execution source: https://www.securityfocus.com/bid/42413/info Computer Associates Oneview Monitor is prone to a remote code-execution vulnerability because the application fails to sufficiently sanitize user-supplied input...

Computer Associates Oneview Monitor 6.0 - 'doSave.jsp' Remote Code Execution

source: https://www.securityfocus.com/bid/42413/info Computer Associates Oneview Monitor is prone to a remote code-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to inject and execute arbitrary JSP...