Lucene search

K
seebugRootSSV:62186
HistoryApr 16, 2014 - 12:00 a.m.

HP多个产品OpenSSL TLS/DTLS心跳信息泄漏漏洞

2014-04-1600:00:00
Root
www.seebug.org
61

0.975 High

EPSS

Percentile

100.0%

CVE ID:CVE-2014-0160

HP多个产品存在安全漏洞。

HP多个产品所绑定的OpenSSL存在安全漏洞,OpenSSL处理TLS”心跳“扩展存在一个边界错误,允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥,用户名密码等。
0
HP Onboard Administrator 4.x
HP AssetManager 9.x
HP Diagnostics 9.x
HP IT Executive Scorecard 9.x
HP LoadRunner 11.x
HP LoadRunner 12.x
HP OpenView Connect-It (CIT) 9.x
HP Performance Center 11.x
HP Performance Center 12.x
HP Server Automation 10.x
HP Service Manager 9.x
HP Smart Update Manager (HP SUM) 6.x
HP System Management Homepage 7.x
HP UCMDB Browser 1.x
HP UCMDB Browser 2.x
HP UCMDB Browser 3.x
HP Universal Discovery Universal CMDB Configuration Manager 10.x
HP Universal Discovery Universal CMDB Configuration Manager 9.x
目前没有详细解决方案:
http://www.hp.com