Information disclosure in HP Network Virtualization
CVE-2015-2121
HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the (1) HttpServlet or (2) NetworkEditorController component, aka ZDI-CAN-2569.
Vulnerability class: Information Disclosure
EPSS: 0.029 (85.5th percentile) — read the EPSS interpretation.
Affected products
- Hp Network_virtualization — versions 8.61, 11.52
- N/a — versions n/a
Weakness classification (CWE)
References
- hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (x_refsource_MISC)
- hp-security-alert@hp.com (vdb-entry, x_refsource_BID)