HP Universal Configuration Management Database Multiple Security Vulnerabilities

Bugtraq ID:	68363
Class:	Unknown
CVE:	CVE-2014-2615 CVE-2014-2616 CVE-2014-2617
Remote:	Yes
Local:	No
Published:	Jul 03 2014 12:00AM
Updated:	Jul 14 2014 12:36AM
Credit:	Mike Arnold (Bruk0ut) and Ziad Badawi working with HP's Zero Day Initiative
Vulnerable:
Not Vulnerable:

HP Universal Configuration Management Database Multiple Security Vulnerabilities

HP Universal Configuration Management Database is prone to multiple security vulnerabilities including a remote code-execution vulnerability and an information-disclosure vulnerability.

Attackers can exploit these issues to execute arbitrary code or obtain sensitive information. This may aid in other attacks.

HP Universal Configuration Management Database 10.01 and 10.10 are vulnerable.

HP Universal Configuration Management Database Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Universal Configuration Management Database Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP Universal Configuration Management Database Multiple Security Vulnerabilities

References:

• HP Homepage (HP)