HP Insight Orchestration Multiple Unspecified Vulnerabilities

Bugtraq ID:	44534
Class:	Access Validation Error
CVE:	CVE-2010-4104 CVE-2010-4105
Remote:	Yes
Local:	No
Published:	Oct 29 2010 12:00AM
Updated:	Oct 29 2010 12:00AM
Credit:	Reported by Vendor
Vulnerable:	HP Insight Orchestration 6.1 HP Insight Orchestration 6.0
Not Vulnerable:	HP Insight Orchestration 6.2

HP Insight Orchestration Multiple Unspecified Vulnerabilities

HP Insight Orchestration is prone to an multiple unspecified security-bypass vulnerabilities because it fails to properly sanitize user supplied input.

An attacker can exploit this issue to bypass certain security restrictions, perform unauthorized actions, or view arbitrary files within the context of the vulnerable application. Information harvested may aid in launching further attacks.

HP Insight Orchestration versions prior to 6.2 are vulnerable.

HP Insight Orchestration Multiple Unspecified Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

HP Insight Orchestration Multiple Unspecified Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

HP Insight Orchestration Multiple Unspecified Vulnerabilities

References:

• HP Homepage (HP)
  
• HPSBMA02606 SSRT100321 (HP)