Hitachi JP1/Integrated Management - TELstaff Alarm View Arbitrary Command Execution Vulnerability

Bugtraq ID:	60154
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 22 2013 12:00AM
Updated:	May 22 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Hitachi JP1/Integrated Management - TELstaff Alarm View 10-00 Hitachi JP1/Integrated Management - TELstaff Alarm View 09-00 Hitachi JP1/Integrated Management - TELstaff Alarm View 08-00 Hitachi JP1/Integrated Management - TELstaff Alarm View 07-50
Not Vulnerable:	Hitachi JP1/Integrated Management - TELstaff Alarm View 10-00-/A Hitachi JP1/Integrated Management - TELstaff Alarm View 09-00-/C Hitachi JP1/Integrated Management - TELstaff Alarm View 08-00-/A

Hitachi JP1/Integrated Management - TELstaff Alarm View Arbitrary Command Execution Vulnerability

Hitachi JP1/Integrated Management - TELstaff Alarm View is prone to a remote arbitrary command-execution vulnerability.

An attacker can exploit this issue to execute arbitrary commands within the context of the vulnerable application.

Hitachi JP1/Integrated Management - TELstaff Alarm View Arbitrary Command Execution Vulnerability

Attackers can use a browser to exploit this issue.

Hitachi JP1/Integrated Management - TELstaff Alarm View Arbitrary Command Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Hitachi JP1/Integrated Management - TELstaff Alarm View Arbitrary Command Execution Vulnerability

References:

• Hitachi Job Management Partner 1 : Integrated management products HomePage (Hitachi)
  
• Vulnerability in JP1/Integrated Management - TELstaff Alarm View (Hitachi)