Executive Summary

Summary
Title	HP Insight Control Performance Management for Windows, Remote Arbitrary File Download

Informations
Name	HPSBMA02600 SSRT100239	First vendor Publication	2010-10-28
Vendor	HP	Last vendor Modification	2010-10-28
Severity (Vendor)	N/A	Revision	1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A potential security vulnerability has been identified in HP Insight Control performance management for Windows. The vulnerability could be exploited remotely to download arbitrary files.

Original Source

Url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02574359

CPE : Common Platform Enumeration

Type	Description	Count
Application	Hp Insight Control Performance Management cpe:2.3:a:hp:insight_control_performance_management:6.1:*:*:*:*:*:*:* cpe:2.3:a:hp:insight_control_performance_management:6.0:*:*:*:*:*:*:* cpe:2.3:a:hp:insight_control_performance_management:5.2.2:*:*:*:*:*:*:* cpe:2.3:a:hp:insight_control_performance_management:5.2:*:*:*:*:*:*:* cpe:2.3:a:hp:insight_control_performance_management:5.0:*:*:*:*:*:*:*	5

Open Source Vulnerability Database (OSVDB)

Id	Description
69180	HP Insight Control Performance Management Unspecified Arbitrary File Access HP Insight Control Performance Management contains an unspecified flaw that may allow an attacker to access arbitrary files. No further details have been provided.

Nessus® Vulnerability Scanner

Date	Description
2010-11-11	Name : The remote host contains a web application that is affected by an authenticat... File : hp_sim_plugins_authentication_bypass.nasl - Type : ACT_ATTACK