Executive Summary

Summary
Title HP-UX WBEM, Remote Unauthorized Access to Diagnostic Data
Informations
Name HPSBUX02755 SSRT100667 First vendor Publication 2012-03-27
Vendor HP Last vendor Modification 2012-03-27
Severity (Vendor) N/A Revision 1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:N)
Cvss Base Score 5.8 Attack Range Network
Cvss Impact Score 4.9 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A potential security vulnerability has been identified with certain HP-UX WBEM components. The vulnerability could be exploited remotely in HP-UX 11.11 and HP-UX 11.23 to gain unauthorized access to diagnostic data. The vulnerability could be exploited locally in HP-UX 11.31 to gain unauthorized access to diagnostic data.

Original Source

Url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03221589

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:19616
 
Oval ID: oval:org.mitre.oval:def:19616
Title: HP-UX WBEM, Remote Unauthorized Access to Diagnostic Data
Description: Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.31 allows local users to obtain access to diagnostic information via unknown vectors, a related issue to CVE-2012-0126.
Family: unix Class: vulnerability
Reference(s): CVE-2012-0125
Version: 11
Platform(s): HP-UX 11
Product(s):
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:19626
 
Oval ID: oval:org.mitre.oval:def:19626
Title: HP-UX WBEM, Remote Unauthorized Access to Diagnostic Data
Description: Unspecified vulnerability in the WBEM implementation in HP HP-UX 11.11 and 11.23 allows remote attackers to obtain access to diagnostic information via unknown vectors, a related issue to CVE-2012-0125.
Family: unix Class: vulnerability
Reference(s): CVE-2012-0126
Version: 11
Platform(s): HP-UX 11
Product(s):
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Os 3