CERTA-2007-AVI-193
Vulnerability from certfr_avis - Published: 2007-04-26 - Updated: 2007-04-26
Une vulnérabilité dans HP StorageWorks permet à un utilisateur local de porter atteinte à la confidentialité de certaines données du système.
Description
Une vulnérabilité de nature non-détaillée par l'éditeur dans HP StorageWorks permet à un utilisateur local d'avoir accès aux autres comptes utilisateur présents sur la machine. Cette action serait rendue possible à cause d'une erreur dans la mise en œuvre du processus d'enregistrement de nouveaux utilisateurs.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| N/A | N/A | HP StorageWorks XP Tiered Storage Manager 1.x ; | ||
| N/A | N/A | HP StorageWorks Command View Advanced Edition for XP 5.x ; | ||
| N/A | N/A | HP StorageWorks XP Tiered Storage Manager 5.x. | ||
| N/A | N/A | HP StorageWorks XP Replication Monitor 1.x ; | ||
| N/A | N/A | HP StorageWorks XP Replication Monitor 5.x ; |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "HP StorageWorks XP Tiered Storage Manager 1.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "HP StorageWorks Command View Advanced Edition for XP 5.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "HP StorageWorks XP Tiered Storage Manager 5.x.",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "HP StorageWorks XP Replication Monitor 1.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "HP StorageWorks XP Replication Monitor 5.x ;",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 de nature non-d\u00e9taill\u00e9e par l\u0027\u00e9diteur dans HP\nStorageWorks permet \u00e0 un utilisateur local d\u0027avoir acc\u00e8s aux autres\ncomptes utilisateur pr\u00e9sents sur la machine. Cette action serait rendue\npossible \u00e0 cause d\u0027une erreur dans la mise en \u0153uvre du processus\nd\u0027enregistrement de nouveaux utilisateurs.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [],
"initial_release_date": "2007-04-26T00:00:00",
"last_revision_date": "2007-04-26T00:00:00",
"links": [],
"reference": "CERTA-2007-AVI-193",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2007-04-26T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 dans HP StorageWorks permet \u00e0 un utilisateur local de\nporter atteinte \u00e0 la confidentialit\u00e9 de certaines donn\u00e9es du syst\u00e8me.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans HP StorageWorks",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 HP HPSBST02200",
"url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=HPSBST02200"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…