CVEvulnerability
CVE-2014-2611
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-06-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or delete data, via unspecified vectors, aka ZDI-CAN-2120.
Affected configurations
• hp executive scorecard 9.40
• hp executive scorecard 9.41
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://secunia.com/advisories/59363 Third Party Advisory
- http://www.securityfocus.com/bid/68093 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030439 Third Party Advisory, VDB Entry
- http://zerodayinitiative.com/advisories/ZDI-14-210/ Third Party Advisory, VDB Entry
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295 Vendor Advisory
- http://secunia.com/advisories/59363 Third Party Advisory
- http://www.securityfocus.com/bid/68093 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030439 Third Party Advisory, VDB Entry
- http://zerodayinitiative.com/advisories/ZDI-14-210/ Third Party Advisory, VDB Entry
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295 Vendor Advisory