CVE-2013-4824

HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module contain an authentication bypass in the AccountService RpcServiceServlet (CVE-2013-4824). The vulnerability allows remote attackers to bypass authentication and can enable account creation/manipulation,...

CVE-2013-4826

CVE-2013-4826 affects the HP Intelligent Management Center (iMC) SOM Module, specifically the FileDownloadServlet. An unauthenticated remote attacker can disclose arbitrary files due to a lack of authentication in the servlet, enabling information exposure (CVE-2013-4826; CVSSv2 base 5.0). A Meta...

CVE-2013-4825

HP iMC/IMC Service Operation Management Software Module is affected by CVE-2013-4825, a remote authentication bypass that allows bypass of access restrictions. The issue stems from the HP iMC CommonUtils component exposure and is exploitable remotely (ZDI-1645). HP’s security bulletin HPSBGN02930...

CVE-2013-4827

HP iMC and HP IMC Service Operation Management Software Module are affected by CVE-2013-4827 via SQL injection in the APM/monitorId path (AppDataDaoImpl). The vulnerability enables remote SQL injection without authentication. The HP security bulletin lists fixes by product/version, e.g., IMC APM ...