CVE-2012-2561: Critical severity hp business service management vulnerability
HP Business Service Management (BSM) 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component via a crafted request to TCP port 1098, 1099, or 4444.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2561?
CVE-2012-2561 is rated as a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2012-2561?
To mitigate CVE-2012-2561, ensure that file upload restrictions are properly configured to prevent the upload of .war files.
What systems are affected by CVE-2012-2561?
CVE-2012-2561 affects HP Business Service Management version 9.12.
What type of attacks can exploit CVE-2012-2561?
CVE-2012-2561 can be exploited by remote attackers who upload malicious JSP code through vulnerable ports.
Is CVE-2012-2561 still a concern for current systems?
Yes, CVE-2012-2561 remains a concern for any organization using the affected version of HP Business Service Management without proper mitigations.