Input validation error in Universal Configuration Management Database - CVE-2013-6215
Published: April 20, 2014 / Updated: August 10, 2020
Vulnerability identifier: #VU41783
CSH Severity: Medium
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2013-6215
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote #AU# to execute arbitrary code.
Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown vectors, aka ZDI-CAN-1977.
Affected software
Universal Configuration Management Database
HP Universal Configuration Management Database
HP Universal Configuration Management Database
How to mitigate CVE-2013-6215
Install update from vendor's website.