File Path Manipulation Vulnerability in HPE LoadRunner and Performance Center
CVE-2016-4360

9.1CRITICAL

Key Information:

Vendor: HP
Status: Loadrunner
Vendor: CVE Published:; 8 June 2016

What is CVE-2016-4360?

A vulnerability in the web/admin/data.js file of the Performance Center Virtual Table Server (VTS) component allows remote attackers to exploit unrestricted file paths sent to an unlink call. By manipulating the path parameter in a data/import_csv request, an attacker could potentially delete arbitrary files on the server, posing a significant security risk to data integrity and system stability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch