CVEvulnerability
CVE-2010-0447
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-03-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document.
Affected configurations
• hp openview performance insight (<= 5.4)
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://marc.info/?l=bugtraq&m=126815897824020&w=2 marc.info
- http://osvdb.org/62797 osvdb.org
- http://secunia.com/advisories/38899 Vendor Advisory
- http://www.securityfocus.com/archive/1/509984/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/38611 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0555 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-026 www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56757 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=126815897824020&w=2 marc.info
- http://osvdb.org/62797 osvdb.org
- http://secunia.com/advisories/38899 Vendor Advisory
- http://www.securityfocus.com/archive/1/509984/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/38611 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/0555 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-026 www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56757 exchange.xforce.ibmcloud.com