CVE-2008-3539: Infoleak

Published Sep 10, 2008
·
Updated

Unspecified vulnerability in HP OpenView Select Identity (HPSI) Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and earlier, HPSI IBM Tivoli Dir Connector 1.02 and earlier, HPSI TOPSecret Connector 2.22.001 and earlier, HPSI RACF Connector 1.12.001 and earlier, HPSI ACF2 Connector 1.02 and earlier, HPSI OpenLDAP Connector 1.02 and earlier, and HPSI BiDir DirX Connector 1.00.003 and earlier, allows local users to obtain sensitive information via unknown vectors.

Affected Software

15 affected components
HP HPSI ACF2 Connector<=1.02
HP HPSI Active Directory Connector<=1.70.003
HP HPSI Active Directory Connector<=2.10.002
HP HPSI Active Directory Connector<=2.20
HP HPSI Active Directory Connector<=2.30
HP HPSI BiDir DirX Connector<=1.00.003
HP HPSI eDirectory Connector<=1.12
HP HPSI eTrust Connector<=1.02
HP HPSI OID Connector<=1.02
HP HPSI OpenLDAP Connector<=1.02
HP HPSI RACF Connector<=1.12.001
HP HPSI SunOne Connector<=1.14
HP HPSI TOPSecret Connector<=2.22.001
HP IBM Tivoli Dir Connector<=1.02
Microsoft Windows

Event History

Sep 10, 2008
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Sep 11, 2008
Data Sourced
01:12 AM
DescriptionWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2008-3539?

CVE-2008-3539 has not been assigned a standard severity rating, but it affects multiple HP OpenView Select Identity Connectors.

2

How do I fix CVE-2008-3539?

To mitigate CVE-2008-3539, upgrade all affected HP OpenView Select Identity Connectors to versions beyond those listed in the vulnerability description.

3

Which software is affected by CVE-2008-3539?

CVE-2008-3539 affects various versions of HP OpenView Select Identity Connectors including the Active Directory Connector, eDirectory Connector, and others up to specified versions.

4

When was CVE-2008-3539 disclosed?

CVE-2008-3539 was disclosed in 2008 and involves vulnerabilities in HP's identity management software.

5

What potential risks does CVE-2008-3539 pose?

CVE-2008-3539 may lead to unauthorized access or manipulation of identity information within the affected Connectors.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203