Vulnerability in HP Palm Webos

CVE-2011-1738

HP Palm webOS 1.4.5 and 1.4.5.1 does not properly restrict Plug-in Development Kit (PDK) applications, which allows local users to gain privileges by leveraging unintended filesystem write access.

EPSS: 0.005 (39.2th percentile) — read the EPSS interpretation.

Affected products

Hp Palm_webos — versions 1.4.5, 1.4.5.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

hp-security-alert@hp.com (vdb-entry, x_refsource_BID)
hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)
hp-security-alert@hp.com (x_refsource_HP, vendor-advisory)