CVE-2011-4160 - Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP

CVE-2011-4160

Summary

Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via unknown vectors.

References

Vulnerable Configurations

cpe:2.3:a:hp:operations_agent:11.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:operations_agent:11.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:performance_agent:4.73:*:*:*:*:*:*:*
cpe:2.3:a:hp:performance_agent:4.73:*:*:*:*:*:*:*
cpe:2.3:a:hp:performance_agent:5.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:performance_agent:5.0:*:*:*:*:*:*:*
cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*
cpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*

CVSS

Base:	3.2 (as of 17-02-2012 - 04:09)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	NONE

cvss-vector via4

AV:L/AC:L/Au:S/C:P/I:P/A:N

refmap via4

bid	50761
hp	HPSBMU02726 SSRT100685
secunia	46971

Last major update

17-02-2012 - 04:09

Published

24-11-2011 - 04:01

Last modified

17-02-2012 - 04:09