Application Lifecycle Management Synchronizer CVE-2013-4836 Remote Code Execution Vulnerability

Bugtraq ID:	63482
Class:	Unknown
CVE:	CVE-2013-4836
Remote:	Yes
Local:	No
Published:	Oct 30 2013 12:00AM
Updated:	Nov 27 2013 12:14AM
Credit:	Andrea Micalizzi aka rgod
Vulnerable:
Not Vulnerable:

Application Lifecycle Management Synchronizer CVE-2013-4836 Remote Code Execution Vulnerability

Application Lifecycle Management Synchronizer is prone to a remote code-execution vulnerability.

Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts may result in a denial-of-service condition.

Versions prior to HP Application Lifecycle Management Synchronizer 1.4.2 are vulnerable.

Application Lifecycle Management Synchronizer CVE-2013-4836 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Application Lifecycle Management Synchronizer CVE-2013-4836 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Application Lifecycle Management Synchronizer CVE-2013-4836 Remote Code Execution Vulnerability

References:

• HP Homepage (HP)