Vulnerability Details : CVE-2010-0447

The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document.

Vulnerability category: BypassGain privilege

Published 2010-03-10 22:30:01

Updated 2018-10-10 19:52:52

Source HP Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2010-0447

Probability of exploitation activity in the next 30 days: 4.27%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 91 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2010-0447

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	[email protected]
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2010-0447

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Assigned by: [email protected] (Primary)

References for CVE-2010-0447

Products affected by CVE-2010-0447

HP » Openview Performance Insight
Versions up to, including, (<=) 5.4
cpe:2.3:a:hp:openview_performance_insight:*:*:*:*:*:*:*:*
Matching versions