HP Web Jetadmin Unspecified Local Security Bypass Vulnerability

Bugtraq ID:	46595
Class:	Unknown
CVE:	CVE-2011-0278
Remote:	No
Local:	Yes
Published:	Feb 28 2011 12:00AM
Updated:	Feb 28 2011 12:00AM
Credit:	Hewlett-Packard Company, HP Software Security Response Team
Vulnerable:	HP Web Jetadmin 10.2.Service Release HP Web Jetadmin 10.2.Service Release
Not Vulnerable:	HP Web Jetadmin 10.2.Service Release

HP Web Jetadmin Unspecified Local Security Bypass Vulnerability

HP Web Jetadmin is prone to a local security-bypass vulnerability.

A local attacker could exploit this issue to gain unauthorized access to certain resources. This may aid in further attacks.

HP Web Jetadmin versions 10.2 Service Release 3 and Service Release 4 are vulnerable.

HP Web Jetadmin Unspecified Local Security Bypass Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

HP Web Jetadmin Unspecified Local Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

HP Web Jetadmin Unspecified Local Security Bypass Vulnerability

References:

• HP Insight Control (HP)
  
• HPSBMA02549 SSRT090158 HP Insight Control Power Management for Windows, Local Un (HP)