CVE-2014-2609
Critical
Description
The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to execute arbitrary code via a session on TCP port 10001, aka ZDI-CAN-2116.
SeverityCritical
CVSS10.0
Exploit probability—
ProductHp Executive Scorecard
PublishedJun 19, 2014
First seenJun 19, 2014
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hp executive_scorecard | 9.40, 9.41 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.