Improper input validation in HP Openview Network Node Manager

CVE-2008-4559

HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the (1) webappmon.exe or (2) OpenView5.exe CGI program. NOTE: this issue may be partially covered by CVE-2009-0205.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.215 (97.4th percentile) — read the EPSS interpretation.

Affected products

Hp Openview_network_node_manager — versions 7.0.1, 7.51, 7.53
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (x_refsource_HP, vendor-advisory)
cve@mitre.org (x_refsource_IDEFENSE, Patch, third-party-advisory)