VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 16, 2013· Updated Jun 16, 2026

CVE-2013-4811

CVE-2013-4811

Description

UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-1743.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Microfocus/Identity Driven Manager2 versions
    cpe:2.3:a:hp:identity_driven_manager:4.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:hp:identity_driven_manager:4.0:*:*:*:*:*:*:*
    • (no CPE)range: 4.0
  • Microfocus/ProCurve Manager3 versions
    cpe:2.3:a:hp:procurve_manager:3.20:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:hp:procurve_manager:3.20:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:procurve_manager:4.0:*:*:*:*:*:*:*
    • (no CPE)range: 3.20, 4.0
  • Intel/Pcmllm-fuzzy
    Range: 3.20, 4.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.