Vulnerability CVE-2011-4160


Published: 2011-11-23   Modified: 2012-02-13

Description:
Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via unknown vectors.

Type:

CWE-noinfo

CVSS2 => (AV:L/AC:L/Au:S/C:P/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
3.2/10
4.9/10
3.1/10
Exploit range
Attack complexity
Authentication
Local
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
None
Affected software
HP -> Operations agent 
HP -> Performance agent 

 References:
http://marc.info/?l=bugtraq&m=132198248000785&w=2
http://marc.info/?l=bugtraq&m=132198248000785&w=2

Copyright 2024, cxsecurity.com

 

Back to Top