NetSight
IP …
high7.8

CVE-2011-4788

Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary files via a …

Impact

Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary files via a pathname in the URI.

Affected products

VendorProductAffected versions
HpStorageworks P2000 G3 Msa Fc\/Iscsi Dual Combo Controller Lff Array System
Version aw567a
HpStorageworks P2000 G3 Msa Fibre Channel Dual Controller Lff Array System
Version ap845a
HpStorageworks P2000 G3 Msa Fibre Channel Dual Controller Sff Array System
Version ap846a

Weakness classification

CWE-22

References