CVE-2009-4000

Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:hp:power_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:hp:power_manager:4.2.6:*:*:*:*:*:*:*
cpe:2.3:a:hp:power_manager:4.2.5:*:*:*:*:*:*:*
cpe:2.3:a:hp:power_manager:4.2.7:*:*:*:*:*:*:*
cpe:2.3:a:hp:power_manager:4.2.8:*:*:*:*:*:*:*

Information

Published : 2010-01-20 14:30

Updated : 2019-10-09 15:59


NVD link : CVE-2009-4000

Mitre link : CVE-2009-4000


JSON object : View

CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Advertisement

dedicated server usa

Products Affected

hp

  • power_manager