CVE-2011-0276

Published: Feb 2, 2011Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet class.

Affected (5)

Products: Hp: Openview Performance Insight

1 product

Openview Performance Insight

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Hp Openview Performance Insight	Version 5.2
Hp Openview Performance Insight	Version 5.31
Hp Openview Performance Insight	Version 5.3
Hp Openview Performance Insight	Version 5.41
Hp Openview Performance Insight	Version 5.4

References (22)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02695453

Source: hp-security-alert@hp.com

Vendor Advisory

http://osvdb.org/70754

Source: hp-security-alert@hp.com

http://secunia.com/advisories/43145

Source: hp-security-alert@hp.com

Vendor Advisory

http://securityreason.com/securityalert/8136

Source: hp-security-alert@hp.com

http://www.exploit-db.com/exploits/16984

Source: hp-security-alert@hp.com

http://www.securityfocus.com/archive/1/516093/100/0/threaded

Source: hp-security-alert@hp.com

http://www.securityfocus.com/bid/46079

Source: hp-security-alert@hp.com

http://www.securitytracker.com/id?1025014

Source: hp-security-alert@hp.com

http://www.vupen.com/english/advisories/2011/0258

Source: hp-security-alert@hp.com

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-11-034

Source: hp-security-alert@hp.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/65038

Source: hp-security-alert@hp.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02695453

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://osvdb.org/70754

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43145

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/8136

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.exploit-db.com/exploits/16984

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/516093/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/46079

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1025014

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0258

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-11-034

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/65038

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.