Security Advisory

CVE-2012-2986

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2012-08-20 22:00:00
Last updated 2024-09-16 19:47:19
Assigner certcc
State PUBLISHED

Description

lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) first, (2) third, or (3) fourth parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4361.