CVE-2013-3574

Currently unrated

Key Information:

Vendor
HP
Status
Insight Diagnostics
Vendor
CVE Published:
14 June 2013

Summary

Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath (aka mount) parameter.

References

http://www.kb.cert.org/vuls/id/324668
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.