[security bulletin] HPSBGN03307 rev.1 - HP Intelligent Provisioning, Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04626732 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04626732 Version: 1 HPSBGN03307 rev....

HP Intelligent Provisioning Information Disclosure Vulnerability

HP Intelligent Provisioning is the server configuration tool. An information disclosure vulnerability exists in HP Intelligent Provisioning versions 1.40-1.60 on Windows 2008 R2 and Windows 2012 platforms. The vulnerability could be exploited by an attacker to obtain sensitive information...

CVE-2015-2111

Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors...

CVE-2015-2111

Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors...

CVE-2015-2111

CVE-2015-2111 concerns HP Intelligent Provisioning. The connected HP security bulletin documents a disclosure-of-information vulnerability affecting HP Intelligent Provisioning versions 1.40–1.60 on Windows Server 2008 R2 and Windows Server 2012. The bulletin lists a Base Score of 5.0 (AV:L/AC:M/...

CVE-2015-2111

Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors...

Cisco NX-OS PowerOn Auto Provisioning (POAP) Arbitrary Command Execution Vulnerability

Cisco NX-OS software is a data center-class operating system that embodies modular design, perpetuity, and maintainability. The Cisco NX-OS PowerOn Auto Provisioning POAP DHCP code fails to properly restrict the initialization process, allowing remote attackers to send specially crafted answer...

EMC Secure Remote Services Virtual Edition SQL Injection

------------------------------------------------------------------------ EMC Secure Remote Services Virtual Edition Provisioning component is affected by SQL injection ------------------------------------------------------------------------ Han Sahin, November 2014...

EMC Secure Remote Services Virtual Edition Command Injection

------------------------------------------------------------------------ Command injection vulnerability in EMC Secure Remote Services Virtual Edition ------------------------------------------------------------------------ Han Sahin, November 2014...

EMC Secure Remote Services Virtual Edition Gateway Provisioning Service SQL Injection Vulnerability

EMC Secure Remote Services Virtual Edition ESRS VE is a suite of Remote Services Virtual Edition software from EMC Corporation used to provide bi-directional remote connectivity between EMC customer service and end-user EMC products and solutions. A SQL injection vulnerability exists in the Gatew...

EMC Secure Remote Services Virtual Edition Gateway Provisioning Service Operating System Command Injection Vulnerability

EMC Secure Remote Services Virtual Edition ESRS VE is a suite of EMC Secure Remote Services Virtual Edition software used to provide bi-directional remote connectivity between EMC customer service and end-user EMC products and solutions. A security vulnerability exists in the Gateway Provisioning...

CVE-2015-0525

The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Design/Logic Flaw

The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2015-0524

SQL injection vulnerability in the Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-0525

The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2015-0525

The ESRS VE Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (versions 3.02 and 3.03) contains a command injection flaw that could allow an unauthenticated remote attacker to execute arbitrary OS commands. The vulnerability is tied to the Gateway Provisioning component; ...

Design/Logic Flaw

The Control and Provisioning of Wireless Access Points CAPWAP daemon in Fortinet FortiOS 5.0 Patch 7 build 4457 allows remote attackers to cause a denial of service locked CAPWAP Access Controller via a large number of ClientHello DTLS messages...

ZTE ZXHN H108L Access Bypass Vulnerability

ZTE ZXHN H108L fails to verify user authentication when editing the CWMP configuration. ZTE ZXHN H108L is provided by some large Greek ISPs to their subscribers. Vulnerability Details ===================== CWMP configuration is accessible only through the Administrator account. CWMP is a protocol...