CVE-2013-4812 in ProCurve Manager

摘要

由 VulDB • 2026-07-18

UpdateCertificatesServlet nel server di registrazione SNAC in HP ProCurve Manager (PCM) 3.20 e 4.0, PCM+ 3.20 e 4.0, nonché Identity Driven Manager (IDM) 4.0 non valida correttamente l'argomento fileName, consentendo agli attaccanti remoti di caricare file .jsp ed eseguire codice arbitrario tramite vettori non specificati, noto anche come ZDI-CAN-1743.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 预定: 2013-07-12
• 披露: 2013-09-16
• 管理: 已接受
• 条目: VDB-64919
• CPE: 准备好
• CWE: CWE-20 (已确认)
• 利用: 下载
• CVSS: 10.0 (NVD)
• EPSS: 0.51903
• KEV: 否
• 活动: 非常低
• 部门: Chemical, Finance, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-4812
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-4812
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-4812/