Title

HP Onboard Administrator Information Disclosure Vulnerability (Cat I impact)

Discussion

Hewlett Packard has released a security bulletin addressing a vulnerability in the OpenSSL implemenation of HP Onboard Administrator. HP Onboard Administrator is an application used for remote and local administration of HP BladeSystem infrastructures. To exploit this vulnerability, an attacker would intercept the traffic data between the client and the server. If successfully exploited, the attacker would gain access to sensitive information.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-52901

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.