HP ProLiant SL Advanced Power Manager Unspecified Remote Security Bypass Vulnerability

Bugtraq ID:	49110
Class:	Unknown
CVE:	CVE-2011-2405
Remote:	Yes
Local:	No
Published:	Aug 09 2011 12:00AM
Updated:	Aug 09 2011 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	HP ProLiant SL Advanced Power Manager 1.11 HP ProLiant SL Advanced Power Manager 1.10
Not Vulnerable:	HP ProLiant SL Advanced Power Manager 1.30 HP ProLiant SL Advanced Power Manager 1.20

HP ProLiant SL Advanced Power Manager Unspecified Remote Security Bypass Vulnerability

HP ProLiant SL Advanced Power Manager is prone to a security-bypass vulnerability.

A remote attacker may exploit this issue to incorrectly validate a user; this may aid in further attacks.

HP ProLiant SL Advanced Power Manager versions 1.10 and 1.11 are affected.

HP ProLiant SL Advanced Power Manager Unspecified Remote Security Bypass Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP ProLiant SL Advanced Power Manager Unspecified Remote Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for details.

HP ProLiant SL Advanced Power Manager Unspecified Remote Security Bypass Vulnerability

References:

• HP ProLiant SL Advanced Power Manager Firmware (HP)
  
• [security bulletin] HPSBHF02699 SSRT100592 rev.1 - HP ProLiant SL Advanced Power (security-alert)
  
• HPSBHF02699 SSRT100592 rev.1 - HP ProLiant SL Advanced Power Manager (SL-APM), R (HP)