Remote File Read Vulnerability in HP Network Virtualization

CVE-2015-2121

Summary

HP Network Virtualization for LoadRunner and Performance Center versions 8.61 and 11.52 are susceptible to a vulnerability that allows remote attackers to read arbitrarily designated files. This flaw can be exploited by crafting specific filenames in URLs, impacting the HttpServlet or NetworkEditorController components. Consequently, unauthorized access to sensitive files may occur, posing significant security risks for organizations utilizing these products.

References