Vulnerability Name:

CVE-2011-1861 (CCN-67912)

Assigned:2011-06-08
Published:2011-06-08
Updated:2017-08-17
Summary:Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote attackers to modify data or obtain sensitive information via unknown vectors.
CVSS v3 Severity:8.2 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:8.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:P/A:P)
6.1 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Partial
Availibility (A): Partial
7.8 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:P/A:N)
5.8 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:P/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-noinfo
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2011-1861

Source: CCN
Type: HP Security Bulletin HPSBMA02674 SSRT100487
HP Service Manager and HP Service Center, Unauthorized Remote Access, Unsecured Local Access, Remote Disclosure of Privileged Information, HTTP Session Credential Re-use, Cross Site Scripting (XSS) and Remote Script Inject

Source: HP
Type: Vendor Advisory
SSRT100487

Source: CCN
Type: SA44836
HP Service Manager and Service Center Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
44836

Source: SREASON
Type: UNKNOWN
8273

Source: CCN
Type: OSVDB ID: 73106
HP Service Manager / Service Center Unspecified Remote Issue

Source: BID
Type: UNKNOWN
48168

Source: CCN
Type: BID-48168
HP Service Manager and Service Center Multiple Vulnerabilities

Source: SECTRACK
Type: UNKNOWN
1025611

Source: XF
Type: UNKNOWN
hp-service-manager-unauth-access(67912)

Source: XF
Type: UNKNOWN
hp-service-manager-unauth-access(67912)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:hp:service_center:6.2.8:*:*:*:*:*:*:*
  • OR cpe:/a:hp:service_manager:7.02:*:*:*:*:*:*:*
  • OR cpe:/a:hp:service_manager:7.11:*:*:*:*:*:*:*
  • OR cpe:/a:hp:service_manager:9.20:*:*:*:*:*:*:*
  • OR cpe:/a:hp:service_manager:9.21:*:*:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/a:hp:service_manager:9.21:*:*:*:*:*:*:*
  • OR cpe:/a:hp:service_manager:9.20:*:*:*:*:*:*:*
  • OR cpe:/a:hp:service_manager:7.11:*:*:*:*:*:*:*
  • OR cpe:/a:hp:service_manager:7.02:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    hp service center 6.2.8
    hp service manager 7.02
    hp service manager 7.11
    hp service manager 9.20
    hp service manager 9.21
    hp service manager 9.21
    hp service manager 9.20
    hp service manager 7.11
    hp service manager 7.02