CVE ID | CVE-2013-4811 |
CVSS SCORE | 10.0, AV:N/AC:L/Au:N/C:C/I:C/A:C |
AFFECTED VENDORS |
Hewlett-Packard |
AFFECTED PRODUCTS |
PCM Plus |
VULNERABILITY DETAILS |
The specific flaw exists within the UpdateDomainControllerServlet. This servlet improperly sanitizes the 'adCert' argument allowing the remote attacker could upload a .jsp file. This can result in remote code execution under the context of the SYSTEM user. |
ADDITIONAL DETAILS | |
DISCLOSURE TIMELINE |
|
CREDIT | Andrea Micalizzi aka rgod |