CVE-2014-2614
Hewlett-Packard SiteScope EmailServlet servlet Information Disclosure Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Unspecified vulnerability in HP SiteScope 11.1x through 11.13 and 11.2x through 11.24 allows remote attackers to bypass authentication via unknown vectors, aka ZDI-CAN-2140.
Vulnerabilidad no especificada en HP SiteScope 11.1x hasta 11.13 y 11.2x hasta 11.24 permite a atacantes remotos evadir la autenticación a través de vectores desconocidos, también conocido como ZDI-CAN-2140.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard SiteScope. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the EmailServlet servlet. The issue lies in the ability to download arbitrary files. A remote attacker can abuse this to disclose sensitive information that could result in remote code execution under the context of the process.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2014-03-24 CVE Reserved
- 2014-07-04 CVE Published
- 2024-07-05 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-287: Improper Authentication
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/68361 | Vdb Entry | |
| http://www.securitytracker.com/id/1030519 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04355129 | 2017-01-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hp Search vendor "Hp" | Sitescope Search vendor "Hp" for product "Sitescope" | 11.10 Search vendor "Hp" for product "Sitescope" and version "11.10" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Sitescope Search vendor "Hp" for product "Sitescope" | 11.11 Search vendor "Hp" for product "Sitescope" and version "11.11" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Sitescope Search vendor "Hp" for product "Sitescope" | 11.12 Search vendor "Hp" for product "Sitescope" and version "11.12" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Sitescope Search vendor "Hp" for product "Sitescope" | 11.13 Search vendor "Hp" for product "Sitescope" and version "11.13" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Sitescope Search vendor "Hp" for product "Sitescope" | 11.20 Search vendor "Hp" for product "Sitescope" and version "11.20" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Sitescope Search vendor "Hp" for product "Sitescope" | 11.21 Search vendor "Hp" for product "Sitescope" and version "11.21" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Sitescope Search vendor "Hp" for product "Sitescope" | 11.22 Search vendor "Hp" for product "Sitescope" and version "11.22" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Sitescope Search vendor "Hp" for product "Sitescope" | 11.23 Search vendor "Hp" for product "Sitescope" and version "11.23" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Sitescope Search vendor "Hp" for product "Sitescope" | 11.24 Search vendor "Hp" for product "Sitescope" and version "11.24" | - |
Affected
| ||||||