Vulnerability Details CVE-2014-7883
HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the headers of a response.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.532
EPSS Ranking 97.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://www.kb.cert.org/vuls/id/867593
- http://www.securitytracker.com/id/1031688
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04553906
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04553906
- http://www.kb.cert.org/vuls/id/867593
- http://www.securitytracker.com/id/1031688
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04553906
- https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04553906
Products affected by CVE-2014-7883
-
cpe:2.3:a:hp:universal_configuration_management_database:10.01
-
cpe:2.3:a:hp:universal_configuration_management_database:10.11
-
cpe:2.3:a:hp:universal_configuration_management_database:9.05