CVE-2016-4360

Severity

64%

Complexity

99%

Confidentiality

81%

web/admin/data.js in the Performance Center Virtual Table Server (VTS) component in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.20 through patch 2, and 12.50 through patch 1 do not restrict file paths sent to an unlink call, which allows remote attackers to delete arbitrary files via the path parameter to data/import_csv, aka ZDI-CAN-3555.

web/admin/data.js in the Performance Center Virtual Table Server (VTS) component in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.20 through patch 2, and 12.50 through patch 1 do not restrict file paths sent to an unlink call, which allows remote attackers to delete arbitrary files via the path parameter to data/import_csv, aka ZDI-CAN-3555.

CVSS 3.0 Base Score 9.1. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H).

CVSS 2.0 Base Score 6.4. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:P/A:P).

Overview

Type

HP

First reported 8 years ago

2016-06-08 14:59:00

Last updated 7 years ago

2017-11-03 01:29:00

Affected Software

HP LoadRunner 11.52 Patch 3

11.52

HP LoadRunner 12.00 Patch 1

12.00

HP LoadRunner 12.01 Patch 3

12.01

HP LoadRunner 12.02 Patch 2

12.02

HP LoadRunner 12.50 Patch 3

12.50

HP Performance Center 11.52 Patch 3

11.52

HP Performance Center 12.00 Patch 1

12.00

HP Performance Center 12.01 Patch 3

12.01

HP Performance Center 12.20 Patch 2

12.20

HP Performance Center 12.50 Patch 1

12.50

References

90975

1036006

Third Party Advisory, VDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-16-364

Third Party Advisory, VDB Entry

https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05157423

Vendor Advisory

https://www.tenable.com/security/research/tra-2016-17

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.