NVD

Id
38416  
Name
CVE-2013-2352  
Description
LeftHand OS (aka SAN iQ) 10.5 and earlier on HP StoreVirtual Storage devices does not provide a mechanism for disabling the HP Support challenge-response root-login feature, which makes it easier for remote attackers to obtain administrative access by leveraging knowledge of an unused one-time password.  
Reject
 
CVSS Version
2  
CVSS Score
9.4  
Severity
High  
CVSS Base Score
9.4  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-07-10  
Modified Date
2013-07-11  
Seq
2013-2352  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
196259 38416 CVE-2013-2352 http://www.theregister.co.uk/2013/07/09/hp_storage_more_possible_backdoors/  View
196260 38416 CVE-2013-2352 HPSBST02896  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21748 JVNDB-2013-003323 HP StoreVirtual Storage デバイス上で稼働する LeftHand OS における管理アクセス権を取得される脆弱性 HP StoreVirtual Storage デバイス上で稼働する LeftHand OS (別名 SAN iQ) は、HP Support のチャレンジレスポンス認証の root ログイン機能を無効化するメカニズムを提供しないため、管理アクセス権を取得される脆弱性が存在します。 CVE-2013-2352 62294 CVE-2013-2352 38416 9.4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003323.html 2013-07-09 2013-07-12 View