Signature Detail
Short Name |
APP:HPOV:UNAUTH-FILE-UPLOAD |
|---|---|
Severity |
Critical |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Hewlett-Packard Operations Manager Server Unauthorized File Upload |
Release Date |
2010/01/05 |
Update Number |
1577 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Hewlett-Packard Operations Manager Server Unauthorized File Upload
This signature detects attempts to exploit a known vulnerability in HP Operations Manager Server. An attacker can use default, unchangeable administrator credentials and upload and execute arbitrary files on the server.
Extended Description
HP Operations Manager is prone to a remote unauthorized-access vulnerability. An attacker can exploit this issue to upload and execute arbitrary code with SYSTEM-level permissions, which will facilitate a complete compromise of the affected computer. Operations Manager 8.1 for Windows is vulnerable; other versions may also be vulnerable.
Affected Products
- HP Operations Manager 8.1
References