CVE-2011-0890

CVSS V2 Medium 5 CVSS V3 None

Description

HP Discovery & Dependency Mapping Inventory (DDMI) 7.50, 7.51, 7.60, 7.61, 7.70, and 9.30 launches the Windows SNMP service with its default configuration, which allows remote attackers to obtain potentially sensitive information or have unspecified other impact by leveraging the public read community.

Overview

CVE ID
CVE-2011-0890

Assigner
hp-security-alert@hp.com

Vulnerability Status
Modified

Published Version
2011-03-25T18:55:01

Last Modified Date
2017-08-17T01:33:44

Weakness Enumerations

CWE	URL
CWE-200	http://cwe.mitre.org/data/definitions/200.html

CPE Configuration (Product)

CPE	Vulnerable	Operator
		AND
cpe:2.3:a:hp:discovery\&dependency_mapping_inventory:7.50:::::::*	1	OR
cpe:2.3:a:hp:discovery\&dependency_mapping_inventory:7.51:::::::*	1	OR
cpe:2.3:a:hp:discovery\&dependency_mapping_inventory:7.60:::::::*	1	OR
cpe:2.3:a:hp:discovery\&dependency_mapping_inventory:7.61:::::::*	1	OR
cpe:2.3:a:hp:discovery\&dependency_mapping_inventory:7.70:::::::*	1	OR
cpe:2.3:a:hp:discovery\&dependency_mapping_inventory:9.30:::::::*	1	OR
cpe:2.3:o:microsoft:windows::::::::	0	OR

CVSS Version 2

Version
2.0

Vector String
AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector
NETWORK

Access Compatibility
LOW

Authentication
NONE

Confidentiality Impact
PARTIAL

Integrity Impact
NONE

Availability Impact
NONE

Base Score
5

Severity
MEDIUM

Exploitability Score
10

Impact Score
2.9

References

Reference URL	Reference Tags
http://securitytracker.com/id?1025239
http://marc.info/?l=bugtraq&m=130082163516878&w=2	Vendor Advisory
http://www.securityfocus.com/bid/46981
http://www.vupen.com/english/advisories/2011/0755
http://securityreason.com/securityalert/8163
https://exchange.xforce.ibmcloud.com/vulnerabilities/66242

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2011-0890
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0890

History

Created	Old Value	New Value	Data Type	Notes
2022-05-10 08:55:12				Added to TrackCVE