HP VCRM Proxy Server Potential Password Disclosure Vulnerability
BID:14032
Info
HP VCRM Proxy Server Potential Password Disclosure Vulnerability
| Bugtraq ID: | 14032 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 22 2005 12:00AM |
| Updated: | Jun 22 2005 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
HP Version Control Repository Manager |
| Not Vulnerable: |
HP Version Control Repository Manager 2.1.1 .730 |
Discussion
HP VCRM Proxy Server Potential Password Disclosure Vulnerability
HP Version Control Repository Manager (VCRM) Proxy Server is affected by a vulnerability that may disclose user passwords to an adversary in close physical proximity to the victim.
This vulnerability could disclose a partial or complete password to an attacker, which may aid in other attacks or allow for unauthorized access to an affected computer.
VCRM versions prior to 2.1.1.730 are affected.
HP Version Control Repository Manager (VCRM) Proxy Server is affected by a vulnerability that may disclose user passwords to an adversary in close physical proximity to the victim.
This vulnerability could disclose a partial or complete password to an attacker, which may aid in other attacks or allow for unauthorized access to an affected computer.
VCRM versions prior to 2.1.1.730 are affected.
Exploit / POC
HP VCRM Proxy Server Potential Password Disclosure Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
HP VCRM Proxy Server Potential Password Disclosure Vulnerability
Solution:
HP has released advisory HPSBMA01166 SSRT5955 to address this issue.
HP Version Control Repository Manager
Solution:
HP has released advisory HPSBMA01166 SSRT5955 to address this issue.
HP Version Control Repository Manager
-
HP Version Control Repository Manager 2.1.1.730
http://h18023.www1.hp.com/support/files/server/us/download/22563.html
References
HP VCRM Proxy Server Potential Password Disclosure Vulnerability
References:
References: