CVE-2013-6214: Medium severity HP Universal Configuration Management Database vulnerability

Published Apr 19, 2014

Updated

Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 9.05, 10.01, and 10.10 allows remote authenticated users to obtain sensitive information via unknown vectors, aka ZDI-CAN-2042.

Affected Software

3 affected components

HP Universal Configuration Management Database=9.05

HP Universal Configuration Management Database=10.01

HP Universal Configuration Management Database=10.10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade HP Universal Configuration Management Database Integration Service to a version that resolves this vulnerability.
Fixed in 9.05Patch ZDI-CAN-2042

Event History

Apr 19, 2014

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·04:49 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-6214?

CVE-2013-6214 is considered a medium severity vulnerability due to its potential to expose sensitive information.

How do I fix CVE-2013-6214?

To fix CVE-2013-6214, it is recommended to apply the latest security patches provided by HP for the affected versions of the software.

Who is affected by CVE-2013-6214?

CVE-2013-6214 affects remote authenticated users of HP Universal Configuration Management Database versions 9.05, 10.01, and 10.10.

What type of vulnerability is CVE-2013-6214?

CVE-2013-6214 is an unspecified vulnerability that allows remote authenticated users to obtain sensitive information.

Can CVE-2013-6214 be exploited remotely?

Yes, CVE-2013-6214 can be exploited remotely by authenticated users.