HP StoreOnce Appliances CVE-2013-6211 Remote Unauthorized Access Vulnerability

Bugtraq ID:	66463
Class:	Unknown
CVE:	CVE-2013-6211
Remote:	Yes
Local:	No
Published:	Mar 25 2014 12:00AM
Updated:	Mar 25 2014 12:00AM
Credit:	Joshua Small of Technion
Vulnerable:	HP StoreOnce Virtual Storage Appliance (VSA) 3.7.1 HP StoreOnce 4430 Backup System (BB857A) 3.6.5 HP StoreOnce 4420 Backup System (BB856A) 3.6.5 HP StoreOnce 4220 Backup System (BB855A) 3.6.5 HP StoreOnce 4210 iSCSI Backup System (BB853A) 3.6.5 HP StoreOnce 4210 FC Backup System (BB854A) 3.6.5 HP StoreOnce 2620 iSCSI Backup System (BB852A) 3.6.5 HP StoreOnce 2610 iSCSI Backup System 3.6.5
Not Vulnerable:	HP StoreOnce Virtual Storage Appliance (VSA) 3.7.2 HP StoreOnce 4430 Backup System (BB857A) 3.9 HP StoreOnce 4420 Backup System (BB856A) 3.9 HP StoreOnce 4220 Backup System (BB855A) 3.9 HP StoreOnce 4210 iSCSI Backup System (BB853A) 3.9 HP StoreOnce 4210 FC Backup System (BB854A) 3.9 HP StoreOnce 2620 iSCSI Backup System (BB852A) 3.9 HP StoreOnce 2610 iSCSI Backup System 3.9

HP StoreOnce Appliances CVE-2013-6211 Remote Unauthorized Access Vulnerability

HP StoreOnce Appliances are prone to an unspecified unauthorized access vulnerability.

A remote attacker can exploit this issue to gain access to sensitive information. This may aid in further attacks.

HP StoreOnce Appliances CVE-2013-6211 Remote Unauthorized Access Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP StoreOnce Appliances CVE-2013-6211 Remote Unauthorized Access Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP StoreOnce Appliances CVE-2013-6211 Remote Unauthorized Access Vulnerability

References:

• HP HomePage (HP)
  
• HPSBST02968 rev.1 - HP StoreOnce, Remote Unauthorized Access (HP)