CVE

Id
69904  
CVE No.
CVE-2014-2609  
Status
Candidate  
Description
The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to execute arbitrary code via a session on TCP port 10001, aka ZDI-CAN-2116.  
Phase
Assigned (20140324)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
667612 69904 CVE-2014-2609 MISC:http://zerodayinitiative.com/advisories/ZDI-14-208/  View
667613 69904 CVE-2014-2609 HP:HPSBMU03048  View
667614 69904 CVE-2014-2609 URL:https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295  View
667615 69904 CVE-2014-2609 HP:SSRT101436  View
667616 69904 CVE-2014-2609 URL:https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04341295  View
667617 69904 CVE-2014-2609 BID:68093  View
667618 69904 CVE-2014-2609 URL:http://www.securityfocus.com/bid/68093  View
667619 69904 CVE-2014-2609 SECTRACK:1030439  View
667620 69904 CVE-2014-2609 URL:http://www.securitytracker.com/id/1030439  View
667621 69904 CVE-2014-2609 SECUNIA:59363  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14349 JVNDB-2014-003224 HP Universal CMDB における任意のコードを実行される脆弱性 HP Universal CMDB には、任意のコードを実行される、または重要な情報を取得される脆弱性が存在します。 CVE-2014-2617 69904 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003224.html  View