CVE-2013-4835

The APISiteScopeImpl SOAP service in HP SiteScope 10.1x and 11.x before 11.22 allows remote attackers to bypass authentication and execute arbitrary code via a direct request to the issueSiebelCmd method, aka ZDI-CAN-1765.

Score

CVSS 2.0 7.5 High

Status

Modified - hp-security-alert@hp.com

Published

2013-11-04

Last modified

2024-08-06

Affected products

• Sitescope (Hp)

References

• http://www.exploit-db.com/exploits/30473
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969435
• https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c03969435