Description
HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2) NetworkEditorController component, aka ZDI-CAN-2569.
References
- SSRT101932 vendor-advisory
- http://zerodayinitiative.com/advisories/ZDI-15-192/
- 74583 vdb-entry