CVE-2004-0709

HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote attackers to bypass access restrictions.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2004-07-27

Last modified

2024-08-08

Affected products

• Openview Select Access (Hp)

References

• http://www.kb.cert.org/vuls/id/205766
• http://www.securityfocus.com/advisories/6774
• http://www.securityfocus.com/bid/10414
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16247