ZDI-CAN-24811: ZDI-24-1635: Hewlett Packard Enterprise Insight Remote Support setInputStream XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2024-11622.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-24811?
The severity of ZDI-CAN-24811 is rated at 7.3 on the CVSS scale.
What does ZDI-CAN-24811 allow an attacker to do?
ZDI-CAN-24811 allows remote attackers to disclose sensitive information from affected installations of Hewlett Packard Enterprise Insight Remote Support.
Is authentication required to exploit ZDI-CAN-24811?
No, authentication is not required to exploit ZDI-CAN-24811.
Which software is affected by ZDI-CAN-24811?
The affected software for ZDI-CAN-24811 is Hewlett Packard Enterprise Insight Remote Support.
How can organizations mitigate the risks associated with ZDI-CAN-24811?
Organizations can mitigate the risks of ZDI-CAN-24811 by ensuring their installations of Hewlett Packard Enterprise Insight Remote Support are up-to-date and configured securely.