‘HP Insight Control Performance Management Arbitrary File Download Vulnerability’

Summary

A potential security vulnerability has been identified in HP Insight Control performance management for Windows.’

Credit:

‘The original article can be found at: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02574359


Details

Vulnerable Systems:
 * HP Insight Control performance management prior to version 6.1 update2

Immune Systems:
 * HP Insight Control performance management version 6.1 update2

The vulnerability could be exploited remotely to download arbitrary files.

CVE Information:
CVE-2010-4100

Disclosure Timeline:
2010-10-28 Initial Release’

Categories: Windows