HP SOA Registry Foundation multiple security vulnerabilities
Published:		31.03.2010
Source:		BUGTRAQ
SecurityVulns ID:		10733
Type:		remote
Level:		5/10
Description:		Crossite scripting, code execution, privilege escalation.

Affected:		HP : SOA Registry Foundation 6.63
		HP : SOA Registry Foundation 6.64
CVE:		CVE-2010-0450 (Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privileges via unknown vectors.)
		CVE-2010-0449 (Cross-site scripting (XSS) vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.)
		CVE-2010-0448 (Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain "unauthorized access to data" via unknown vectors.)

Original document

HP, [security bulletin] HPSBMA02490 SSRT090222 rev.1 - HP SOA Registry Foundation, Remote Unauthorized Access to Data, Cross Site Scripting (XSS), Privilege Escalation (31.03.2010)

Discuss:

Read or add your comments to this news (0 comments)