Path Traversal in HP Network Virtualization
CVE-2014-2625
Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to read arbitrary files via crafted input, aka ZDI-CAN-2023.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.099 (95.1th percentile) — read the EPSS interpretation.
Affected products
- Hp Network_virtualization — versions 8.6
- N/a — versions n/a
Weakness classification (CWE)
References
- hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)
- hp-security-alert@hp.com (x_refsource_SECUNIA, third-party-advisory)
- hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (x_refsource_MISC)