HP Application Lifecycle Management CVE-2014-2631 Local Privilege Escalation Vulnerability

Bugtraq ID:	69063
Class:	Unknown
CVE:	CVE-2014-2631
Remote:	No
Local:	Yes
Published:	Aug 05 2014 12:00AM
Updated:	Aug 14 2014 01:22AM
Credit:	Dave Weinstein of HP Zero Day Initiative
Vulnerable:
Not Vulnerable:

HP Application Lifecycle Management CVE-2014-2631 Local Privilege Escalation Vulnerability

HP Application Lifecycle Management is prone to a local privilege-escalation vulnerability.

An attacker with local access could potentially exploit this issue to execute arbitrary-code with elevated privileges. Successful exploits may compromise affected computers.

HP Application Lifecycle Management CVE-2014-2631 Local Privilege Escalation Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

HP Application Lifecycle Management CVE-2014-2631 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP Application Lifecycle Management CVE-2014-2631 Local Privilege Escalation Vulnerability

References:

• HP Homepage (HP)