CVE-2015-2120

Vulnerability

HP SiteScope versions 11.1x before 11.13, 11.2x before 11.24.391, and 11.3x before 11.30.521 contain an unspecified privilege escalation vulnerability in the Log Analysis Tool. The tool fails to validate or restrict the log path, allowing a remote authenticated user to read arbitrary files, including the users.config file [1].

Exploitation

An attacker must have valid authentication credentials for SiteScope and network access. Using the Log Analysis Tool, the attacker can set the log path to point to users.config and then read its contents. This allows retrieval of stored credentials or tokens that can be used to escalate privileges [1].

Impact

Successful exploitation enables the attacker to escalate from a regular user to the administrator role, gaining full control over SiteScope. This results in complete compromise of confidentiality, integrity, and availability of the affected system [1].

Mitigation

HP has released updates to address this vulnerability: upgrade to SiteScope 11.13, 11.24.391, or 11.30.521 respectively. No workaround has been provided. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.