CVE-2007-4590 Information disclosure in n/a
Local users can execute Ignite-UX commands without being informed of networking changes, potentially leading to undisclosed information exposure.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-4590?
CVE-2007-4590 is a low-severity vulnerability in Hp Hp-Ux, published on 29 Aug 2007. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors.
Which versions are affected by CVE-2007-4590?
It affects 3 products.
Products include Hp Dynrootdisk, Hp Hp-Ux, Hp Ignite-Ux.
How do I fix CVE-2007-4590?
No fix has been published for CVE-2007-4590 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-4590 being exploited?
There is no known exploitation of CVE-2007-4590 in the wild and no public exploit code.
Sources
Also known as GHSA-qx4f-wxcg-v25j.