HP Systems Insight Manager CVE-2014-2643 Unspecified Remote Privilege Escalation Vulnerability

Bugtraq ID:	70225
Class:	Design Error
CVE:	CVE-2014-2643
Remote:	Yes
Local:	No
Published:	Oct 02 2014 12:00AM
Updated:	Jan 12 2015 09:02AM
Credit:	The vendor reported this issue.
Vulnerable:	HP Systems Insight Manager 7.0 HP Systems Insight Manager 6.3 HP Systems Insight Manager 6.2 HP Systems Insight Manager 6.1 HP Systems Insight Manager 6.0.0.96 HP Systems Insight Manager 6.0 HP Systems Insight Manager 5.3 HP Systems Insight Manager 5.2 SP2 HP Systems Insight Manager 5.1 SP1 HP Systems Insight Manager 5.0 SP6 HP Systems Insight Manager 5.0 SP5 HP Systems Insight Manager 5.0 SP3 HP Systems Insight Manager 5.0 SP2 HP Systems Insight Manager 5.0 SP1 HP Systems Insight Manager 5.0 HP Systems Insight Manager 4.2 SP2 HP Systems Insight Manager 4.2 SP1 HP Systems Insight Manager 4.2
Not Vulnerable:

HP Systems Insight Manager CVE-2014-2643 Unspecified Remote Privilege Escalation Vulnerability

HP Systems Insight Manager is prone to an unspecified remote privilege-escalation vulnerability.

Remote attackers can exploit this issue to gain elevated privileges and perform unauthorized actions. This may aid in further attacks.

Versions prior to Systems Insight Manager 7.4 are vulnerable.

HP Systems Insight Manager CVE-2014-2643 Unspecified Remote Privilege Escalation Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Systems Insight Manager CVE-2014-2643 Unspecified Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP Systems Insight Manager CVE-2014-2643 Unspecified Remote Privilege Escalation Vulnerability

References:

• Systems Insight Manager Homepage (HP)