HP Insight Diagnostics CVE-2013-3575 Local File Include Vulnerability
BID:60449
Info
HP Insight Diagnostics CVE-2013-3575 Local File Include Vulnerability
| Bugtraq ID: | 60449 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-3575 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 10 2013 12:00AM |
| Updated: | Jun 10 2013 12:00AM |
| Credit: | Markus Wulftange from Daimler TSS |
| Vulnerable: | |
| Not Vulnerable: | |
Exploit / POC
HP Insight Diagnostics CVE-2013-3575 Local File Include Vulnerability
An attacker can exploit this issue using a web browser.
The following example URI is available:
https://www.example.com/hpdiags/frontend2/help/pageview.php?path=comparesurvey.html
An attacker can exploit this issue using a web browser.
The following example URI is available:
https://www.example.com/hpdiags/frontend2/help/pageview.php?path=comparesurvey.html
Solution / Fix
HP Insight Diagnostics CVE-2013-3575 Local File Include Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].