« Volver al listado

CVE-2008-3539

Estado: ModificadaBaja (2.1)—

Unspecified vulnerability in HP OpenView Select Identity (HPSI) Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and earlier, HPSI IBM Tivoli Dir Connector 1.02 and earlier, HPSI TOPSecret Connector 2.22.001 and earlier, HPSI RACF Connector 1.12.001 and earlier, HPSI ACF2 Connector 1.02 and earlier, HPSI OpenLDAP Connector 1.02 and earlier, and HPSI BiDir DirX Connector 1.00.003 and earlier, allows local users to obtain sensitive information via unknown vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (11)

HP — Hpsi Acf2 ConnectorHP — Hpsi Active Directory ConnectorHP — Hpsi Bidir Dirx ConnectorHP — Hpsi Edirectory ConnectorHP — Hpsi Etrust ConnectorHP — Hpsi OID ConnectorHP — Hpsi Openldap ConnectorHP — Hpsi Racf ConnectorHP — Hpsi Sunone ConnectorHP — Hpsi Topsecret ConnectorHP — IBM Tivoli DIR Connector

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-3539",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-09-11T01:12:57.853",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=122062779731581&w=2",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/31764",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/4236",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1020821",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/31024",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/2501",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44916",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=122062779731581&w=2",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/31764",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/4236",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1020821",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/31024",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/2501",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44916",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in HP OpenView Select Identity (HPSI) Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and earlier, HPSI IBM Tivoli Dir Connector 1.02 and earlier, HPSI TOPSecret Connector 2.22.001 and earlier, HPSI RACF Connector 1.12.001 and earlier, HPSI ACF2 Connector 1.02 and earlier, HPSI OpenLDAP Connector 1.02 and earlier, and HPSI BiDir DirX Connector 1.00.003 and earlier, allows local users to obtain sensitive information via unknown vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad sin especificar en  HP OpenView Select Identity (HPSI) Connectors  sobre Windows, utilizado en HPSI Active Directory Connector 2.30 y anteriores, HPSI SunOne Connector 1.14 y anteriores, HPSI eDirectory Connector 1.12 y anteriores, HPSI eTrust Connector 1.02 y anteriores, HPSI OID Connector 1.02 y anteriores, HPSI IBM Tivoli Dir Connector 1.02 y anteriores, HPSI TOPSecret Connector 2.22.001 y anteriores, HPSI RACF Connector 1.12.001 y anteriores, HPSI ACF2 Connector 1.02 y anteriores, HPSI OpenLDAP Connector 1.02 y anteriores, and HPSI BiDir DirX Connector 1.00.003 y anteriores, permite a ausuarios locales obtener información sensible a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T22:56:00.990",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:hpsi_acf2_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2ADE02FF-E7E9-421D-BB22-F8F0523042DE",
              "versionEndIncluding": "1.02"
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_active_directory_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9ACA531-E06C-4494-8E5D-694433316DBF",
              "versionEndIncluding": "1.70.003"
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_active_directory_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "67B9BAB4-4BE9-401B-93CB-1060D9DA58CD",
              "versionEndIncluding": "2.10.002"
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_active_directory_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E963EBC-C8BD-4308-A8E1-1752A9C3636E",
              "versionEndIncluding": "2.20"
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_active_directory_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0AAEE616-803B-4DA6-83BB-F8492242FB0A",
              "versionEndIncluding": "2.30"
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_bidir_dirx_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04BCD03A-532D-4CD1-AD29-10976C3A3CF9",
              "versionEndIncluding": "1.00.003"
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_edirectory_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E3338660-1EAE-4B48-9F0C-953D5118E80C",
              "versionEndIncluding": "1.12"
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_etrust_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5E27C72C-6424-40CB-8917-16171ADCE94F",
              "versionEndIncluding": "1.02"
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_oid_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87DDF395-56F8-47C3-9BC9-732753264763",
              "versionEndIncluding": "1.02"
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_openldap_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BE6B800-0DC9-46C5-BE8C-A9C30C68C5BE",
              "versionEndIncluding": "1.02"
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_racf_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD712946-8B98-495E-AC83-DA897ED15D46",
              "versionEndIncluding": "1.12.001"
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_sunone_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E61EBB8-B01B-4940-9778-6EC3CC9FEC73",
              "versionEndIncluding": "1.14"
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_topsecret_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2FE48EC3-A4C7-439A-8719-392652668087",
              "versionEndIncluding": "2.22.001"
            },
            {
              "criteria": "cpe:2.3:a:hp:ibm_tivoli_dir_connector:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ECC89FFF-169B-42B5-AB16-577F32C13EC5",
              "versionEndIncluding": "1.02"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}