VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 8, 2009· Updated Apr 23, 2026

CVE-2008-4560

CVE-2008-4560

Description

HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to obtain sensitive information via (1) a crafted request to the nnmRptConfig.exe CGI program, which reveals the pathname of log directories; or (2) a crafted parameter in a request to the ovlaunch.exe CGI program, which reveals configuration details. NOTE: this issue may be partially covered by CVE-2009-0205.

Affected products

12
  • HP/Openview Network Node Manager12 versions
    cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*+ 11 more
    • cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*
    • cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*
    • cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*
    • cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*
    • cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*
    • cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*
    • cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*
    • cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*
    • cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*
    • cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*
    • cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*
    • cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.