Unscored CVE-2014-2611 EUVD-2014-2643GHSA-q9g2-pqgh-r6q5

Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users t…

Published Jun 19, 2014 · Updated Aug 6, 2024 · Assigned by hp

Description

Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or delete data, via unspecified vectors, aka ZDI-CAN-2120.

References

59363 third-party-advisory
http://zerodayinitiative.com/advisories/ZDI-14-210/
68093 vdb-entry
1030439 vdb-entry
SSRT101431 vendor-advisory