Description:
A
vulnerability has been reported in HP Select Identity, which can be
exploited by malicious users to bypass certain security restrictions.
The vulnerability is caused due to an unspecified error and can be exploited to gain access to other user accounts.
The vulnerability is reported in versions 4.00, 4.01, 4.11, 4.12, 4.13,
and 4.20 running on HP-UX, Windows 2003 Server, Red Hat Linux AS3 and
AS4, and Solaris.
Solution:
Apply patch (see vendor"s advisory for details).
http://support.openview.hp.com/selfsolve/patches
Provided and/or discovered by:
Reported by the vendor.
Original Advisory:
HPSBMA02317 SRT080026:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01391833
|
