Arbitrary code execution vulnerability in HP SiteScope SOAP

Release date:
Updated on:

Affected Systems:
HP SiteScope 11.x
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2012-3259

HP SiteScope is a non-agent monitoring software that maintains the availability and performance of its distributed IT infrastructure.

The SOAP function in HP SiteScope 11.10-11.12 has an unknown details vulnerability, which allows remote attackers to execute arbitrary code.

<* Source: HP
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

HP
--
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://itrc.hp.com