CVE-2009-2682 Auth bypass in n/a

High 7.2 Published 24 Sep 2009 Updated 7 Aug 2024

Local attackers can bypass HP-UX Role-Based Access Control restrictions to gain unauthorized access or privileges.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2009-2682?

CVE-2009-2682 is a high-severity authentication bypass vulnerability in Hp Hp-Ux, published on 24 Sep 2009. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Unspecified vulnerability in Role-Based Access Control (RBAC) in HP HP-UX B.11.23 and B.11.31 allows local users to bypass intended access restrictions via unknown vectors.

Weakness: CWE-264

Which versions are affected by CVE-2009-2682?

It affects 1 product.

Products include Hp Hp-Ux.

How do I fix CVE-2009-2682?

No fix has been published for CVE-2009-2682 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2009-2682 being exploited?

There is no known exploitation of CVE-2009-2682 in the wild and no public exploit code.

All Hp Hp-Ux vulnerabilities

Sources

Also known as GHSA-8q8h-9fx4-hc7h.