Vulnerability Note VU#885499
HP StorageWorks P2000 G3 directory traversal vulnerability
HP StorageWorks P2000 G3 contains a directory traversal vulnerability which may allow a remote, unauthenticated attacker to obtain sensitive information.
HP StorageWorks P2000 G3 contains an embedded webserver which is vulnerable to a directory traversal vulnerability which may allow a remote, unauthenticated attacker to obtain sensitive information.
This vulnerability was also reported to ZDI by another researcher and was disclosed publicly.
A remote unauthenticated attacker could obtain sensitive information.
Vendor Information (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Hewlett-Packard Company||Affected||18 Nov 2011||02 Mar 2012|
CVSS Metrics (Learn More)
Thanks to Thomas Leonardo of The Cooperative Bank for reporting this vulnerability.
This document was written by Michael Orlando.
- CVE IDs: CVE-2011-4788
- Date Public: 13 Jan 2012
- Date First Published: 20 Feb 2012
- Date Last Updated: 02 Mar 2012
- Document Revision: 11
If you have feedback, comments, or additional information about this vulnerability, please send us email.