Unscored CVE-2011-4788 EUVD-2011-4706GHSA-ww5g-gf78-x289

Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read ar…

Published Jan 13, 2012 · Updated Aug 7, 2024 · Assigned by hp

Description

Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary files via a pathname in the URI.

References

SSRT100516 vendor-advisory
http://zerodayinitiative.com/advisories/ZDI-12-015/
20120112 ZDI-12-015 : (0Day) HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities mailing-list