Information disclosure in HP Discovery\&dependency Mapping Inventory
CVE-2011-0890
HP Discovery & Dependency Mapping Inventory (DDMI) 7.50, 7.51, 7.60, 7.61, 7.70, and 9.30 launches the Windows SNMP service with its default configuration, which allows remote attackers to obtain potentially sensitive information or have unspecified other impact by leveraging the public read community.
Vulnerability class: Information Disclosure
EPSS: 0.025 (83.3th percentile) — read the EPSS interpretation.
Affected products
- Hp Discovery\&dependency_mapping_inventory — versions 7.50, 7.51, 7.60
- Microsoft Windows
- N/a — versions n/a
Weakness classification (CWE)
References
- hp-security-alert@hp.com (vdb-entry, x_refsource_XF)
- hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)
- hp-security-alert@hp.com (x_refsource_SREASON, third-party-advisory)
- hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (vdb-entry, x_refsource_VUPEN)
- hp-security-alert@hp.com (vdb-entry, x_refsource_BID)