Vulnerabilities > CVE-2013-4826 - Unspecified vulnerability in HP products

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
hp
nessus
metasploit
NVD
Published: 2013-10-13
Updated: 2024-11-21

Summary

Unspecified vulnerability in HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1647.

Vulnerable Configurations

Part Description Count
Application
Hp
2

Metasploit

descriptionThis module exploits a lack of authentication and access control in HP Intelligent Management, specifically in the FileDownloadServlet from the SOM component, in order to retrieve arbitrary files with SYSTEM privileges. This module has been tested successfully on HP Intelligent Management Center 5.2_E0401 with SOM 5.2 E0401 over Windows 2003 SP2.
idMSF:AUXILIARY/SCANNER/HTTP/HP_IMC_SOM_FILE_DOWNLOAD
last seen2020-04-11
modified2017-07-24
published2013-10-23
referenceshttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4826
reporterRapid7
sourcehttps://github.com/rapid7/metasploit-framework/blob/master//modules/auxiliary/scanner/http/hp_imc_som_file_download.rb
titleHP Intelligent Management SOM FileDownloadServlet Arbitrary Download

Nessus

  • NASL familyMisc.
    NASL idHP_IMC_SOM_70_E0101.NASL
    descriptionThe version of the HP Intelligent Management Center Service Operation Management Software Module on the remote is prior to 7.0 E0101. It is therefore, potentially affected by multiple vulnerabilities : - An authentication bypass vulnerability exists in the
    last seen2020-06-01
    modified2020-06-02
    plugin id71892
    published2014-01-09
    reporterThis script is Copyright (C) 2014-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/71892
    titleHP Intelligent Management Center SOM Module < 7.0 E0101 Multiple Vulnerabilities
  • NASL familyMisc.
    NASL idHP_IMC_WEB_SOM_FILE_DOWNLOAD.NASL
    descriptionThe HP Intelligent Management Center (IMC) application running on the remote host is affected by an information disclosure vulnerability in the included IMC Service Operation Management (SOM) Module, specifically within the FileDownload servlet, due to a failure to require authentication. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to disclose the contents of arbitrary files on the system. Note that HP IMC is reportedly affected by additional vulnerabilities; however, Nessus has not tested for these.
    last seen2020-06-01
    modified2020-06-02
    plugin id71888
    published2014-01-09
    reporterThis script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/71888
    titleHP Intelligent Management Center SOM Module Information Disclosure

References