CVE-2014-2611

Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or delete data, via unspecified vectors, aka ZDI-CAN-2120.

Score

CVSS 2.0 9.0 Critical

Status

Modified - hp-security-alert@hp.com

Published

2014-06-19

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• Executive Scorecard (Hp)

References

• http://secunia.com/advisories/59363
• http://www.securityfocus.com/bid/68093
• http://www.securitytracker.com/id/1030439
• http://zerodayinitiative.com/advisories/ZDI-14-210/
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295