CVE-2015-5426 : Unspecified vulnerability in HP LoadRunner Controller before 12.50 allows local

Unspecified vulnerability in HP LoadRunner Controller before 12.50 allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2756.

Published 2015-09-16 02:00:08

Updated 2016-12-22 03:00:01

Source HP Inc.

View at NVD, CVE.org

Products affected by CVE-2015-5426

HP » Loadrunner
Versions up to, including, (<=) 12.49
cpe:2.3:a:hp:loadrunner:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.43%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 61 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

http://www.securitytracker.com/id/1033561

HP LoadRunner Controller Buffer Overflow in Processing Scenario Files Lets Remote Users Execute Arbitrary Code - SecurityTracker
http://www.zerodayinitiative.com/advisories/ZDI-15-408

ZDI-15-408 | Zero Day Initiative
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04692147

HPSBMU03339 rev.1 - HP LoadRunner Controller, Local Execution of Arbitrary Code
Vendor Advisory

Jump to