virus logo Intrusion Prevention

HP.OpenView.Performance.Insight.Server.DoPost.Code.Execution

description-logoDescription

This indicates an attack attempt to exploit a code execution vulnerability in HP OpenView Performance Insight Server.
This issue is caused by lacking of checking the file content uploaded by the "hidden account" in the com.trinagy.security.XMLUserManager Java class. It may allow remote attackers to execute arbitrary code by uploading a crafted JSP file.

affected-products-logoAffected Products

HP OpenView Performance Insight 5.4.1
HP OpenView Performance Insight 5.4
HP OpenView Performance Insight 5.3.1
HP OpenView Performance Insight 5.3
HP OpenView Performance Insight 5.2

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Refer to the vendor's web site for suggested workaround.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

References

http://www.exploit-db.com/exploits/16984/
ID 26041
Created May 09, 2011
Updated Nov 03, 2021
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
CVE ID CVE-2011-0276
Exploit Prediction Score 97.19%
Default Action drop
Active
Affected OS Windows, Linux
Affected App HP