Information disclosure in HP Universal Configuration Management Database
CVE-2014-7883
HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response.
Vulnerability class: Information Disclosure
EPSS: 0.370 (98.4th percentile) — read the EPSS interpretation.
Affected products
- Hp Universal_configuration_management_database — versions 9.05, 10.01, 10.11
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- hp-security-alert@hp.com (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- hp-security-alert@hp.com (x_refsource_HP, vendor-advisory, Not Applicable)
- hp-security-alert@hp.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2014-7883?
- CVE-2014-7883 is a vulnerability in HP Universal Configuration Management Database, classified under Information Disclosure. Published 2015-02-15.
- Is CVE-2014-7883 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.