Unscored CVE-2011-0271 EUVD-2011-0297GHSA-gmwh-w874-fr82

The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows …

Published Jan 13, 2011 · Updated Aug 6, 2024 · Assigned by hp

Description

The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection vulnerability."

References

HPSBMA02621 vendor-advisory
ADV-2011-0085 vdb-entry
hp-opennnm-cgi-command-exec(64657) vdb-entry
20110110 HP Network Node Manager Command Injection Vulnerability third-party-advisory
45762 vdb-entry
1024951 vdb-entry