CVE-2011-4788

Published Jan 13, 2012

Last updated a month ago

Overview

Description
Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary files via a pathname in the URI.
Source
hp-security-alert@hp.com
NVD status
Deferred

Risk scores

CVSS 2.0

Type
Primary
Base score
7.8
Impact score
6.9
Exploitability score
10
Vector string
AV:N/AC:L/Au:N/C:C/I:N/A:N

Weaknesses

nvd@nist.gov
CWE-22

Social media

Hype score
Not currently trending

Configurations