Hewlett-Packard Universal CMDB mam-collectors Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Universal CMDB. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mam-collectors servlet. The issue lies in the ability to download arbitrary files. A remote attacker can abuse this to disclose the credentials store that could result in remote code under the context of the process.