'; } else{ echo ''; } echo '
|
|||
Release Date:2025/9/15
Rule Name:CVE-2014-2620: HP Intelligent Management Center Information Disclosure Vulnerability
Severity:high
CVE ID:CVE-2014-2620
Descripiton:
|
An information disclosure vulnerability exists in HP Intelligent Management Center. The vulnerability is due to a lack of authentication and insufficient input validation when processing HTTP request parameters. By sending crafted HTTP requests to the target system, a remote unauthenticated attacker can leverage this vulnerability to view the file contents of arbitrary files on a target system. This rule supports to defend the A6: Vulnerable and Outdated Components and A2: Cryptgraphic Failures of OWASP Top 10 - 2021.
Other reference:None
Solution:
|
Update vendor patches.