Path Traversal in HP Openview Network Node Manager

CVE-2008-0068

Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.051 (91.5th percentile) — read the EPSS interpretation.

Affected products

Hp Openview_network_node_manager — versions 7.51, 7.53
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_SECTRACK)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_XF)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (mailing-list, x_refsource_BUGTRAQ)
PSIRT-CNA@flexerasoftware.com (x_refsource_MISC)
PSIRT-CNA@flexerasoftware.com (x_refsource_SREASON, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (Exploit, vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (x_refsource_HP, vendor-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_OSVDB, vdb-entry)
PSIRT-CNA@flexerasoftware.com (mailing-list, x_refsource_BUGTRAQ)