CVE-2010-0447
First published: Wed Mar 10 2010(Updated: )
The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document.
Credit: hp-security-alert@hp.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP OpenView Performance Insight | <=5.4 | |
| <=5.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://marc.info/?l=bugtraq&m=126815897824020&w=2
- http://www.vupen.com/english/advisories/2010/0555
- http://www.securityfocus.com/bid/38611
- http://secunia.com/advisories/38899
- http://www.zerodayinitiative.com/advisories/ZDI-10-026
- http://osvdb.org/62797
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56757
- http://www.securityfocus.com/archive/1/509984/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2010-0447?
CVE-2010-0447 is classified as a critical vulnerability due to its potential to allow remote command execution.
How can I fix CVE-2010-0447?
To fix CVE-2010-0447, users should upgrade to a supported version of HP OpenView Performance Insight that addresses this vulnerability.
What versions of HP OpenView Performance Insight are affected by CVE-2010-0447?
CVE-2010-0447 affects HP OpenView Performance Insight version 5.4 and earlier.
What type of vulnerability is CVE-2010-0447?
CVE-2010-0447 is an authentication and validation vulnerability that allows remote attackers to execute arbitrary commands.
What are the potential impacts of CVE-2010-0447?
If exploited, CVE-2010-0447 could lead to unauthorized access and control over the affected system.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/event
- vendor/hp
- canonical/hp openview performance insight
- version/hp openview performance insight/5.4