medium5.0Public exploit code
CVE-2014-7883
HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hewlett-Packard (HP) UCMDB - JMX-Console Authentication Bypass2015-02-03 · webapps · windows · Verified
Impact
HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Universal Configuration Management Database | Versions 9.05, 10.01, 10.11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.kb.cert.org/vuls/id/867593
- http://www.securitytracker.com/id/1031688
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04553906
- http://www.kb.cert.org/vuls/id/867593
- http://www.securitytracker.com/id/1031688
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04553906