CVE

Id
55804  
CVE No.
CVE-2012-2561  
Status
Candidate  
Description
HP Business Service Management (BSM) 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component via a crafted request to TCP port 1098, 1099, or 4444.  
Phase
Assigned (20120509)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
580901 55804 CVE-2012-2561 HP:HPSBMU02792  View
580902 55804 CVE-2012-2561 URL:http://marc.info/?l=bugtraq&m=134013352316810&w=2  View
580903 55804 CVE-2012-2561 HP:SSRT100820  View
580904 55804 CVE-2012-2561 URL:http://marc.info/?l=bugtraq&m=134013352316810&w=2  View
580905 55804 CVE-2012-2561 CERT-VN:VU#859230  View
580906 55804 CVE-2012-2561 URL:http://www.kb.cert.org/vuls/id/859230  View
580907 55804 CVE-2012-2561 BID:53556  View
580908 55804 CVE-2012-2561 URL:http://www.securityfocus.com/bid/53556  View
580909 55804 CVE-2012-2561 OSVDB:81981  View
580910 55804 CVE-2012-2561 URL:http://osvdb.org/81981  View
580911 55804 CVE-2012-2561 SECTRACK:1027075  View
580912 55804 CVE-2012-2561 URL:http://www.securitytracker.com/id?1027075  View
580913 55804 CVE-2012-2561 SECUNIA:49218  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34805 JVNDB-2011-005047 Bloxx Web Filtering における IP アドレスとドメインの制限を回避される脆弱性 Bloxx Web Filtering は、HTTPS コネクションにおけるアクセスコントロールとログ取得の実行時に、X-Forwarded-For ヘッダを適切に解釈しないため、IP アドレスとドメインの制限を回避される、およびログへの誤った書き込みを誘発される脆弱性が存在します。 CVE-2012-2566 55804 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005047.html  View