← Volver a CVEs

CVE-2012-2561

N/A

Descripcion

HP Business Service Management (BSM) 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Application Server component via a crafted request to TCP port 1098, 1099, or 4444.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado5/21/2012

Ultima modificacion4/29/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

hp:business_service_management

Debilidades (CWE)

CWE-264

Referencias

http://marc.info/?l=bugtraq&m=134013352316810&w=2(cret@cert.org)

http://osvdb.org/81981(cret@cert.org)

http://secunia.com/advisories/49218(cret@cert.org)

http://www.kb.cert.org/vuls/id/859230(cret@cert.org)

http://www.securityfocus.com/bid/53556(cret@cert.org)

http://www.securitytracker.com/id?1027075(cret@cert.org)

http://marc.info/?l=bugtraq&m=134013352316810&w=2(af854a3a-2127-422b-91ae-364da2661108)

http://osvdb.org/81981(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/49218(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/859230(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/53556(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id?1027075(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.