HP Operations Dashboard Portal Default Manager Account Remote Security Vulnerability

Bugtraq ID:	36258
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 03 2009 12:00AM
Updated:	Nov 30 2009 10:35PM
Credit:	Intevydis
Vulnerable:	HP Operations Dashboard 2.1
Not Vulnerable:

HP Operations Dashboard Portal Default Manager Account Remote Security Vulnerability

HP Operations Dashboard is prone to a remote security vulnerability.

Operations Dashboard 2.1 for Windows is vulnerable; other versions may also be vulnerable.

HP Operations Dashboard Portal Default Manager Account Remote Security Vulnerability

A working commercial exploit is available through Intevydis. This exploit is not otherwise publicly available or known to be circulating in the wild.

Attackers can exploit this issue using readily available tools. The following authentication credentials are available:

j2deployer:j2deployer

HP Operations Dashboard Portal Default Manager Account Remote Security Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Operations Dashboard Portal Default Manager Account Remote Security Vulnerability

References:

• HP bugs (Intevydis)
  
• Micro News Homepage (phptoys)
  
• VulnDisco Pack Professional (Intevydis)