HP Operations Manager 远程代码执行漏洞(CVE-2014-2649)

HP Operations Manager 远程代码执行漏洞(CVE-2014-2649)

发布日期：2014-10-08
更新日期：2014-10-13

受影响系统：
HP Operations Manager
描述：
BUGTRAQ  ID: 70353
 CVE(CAN) ID: CVE-2014-2649

 HP Operations Orchestration是一款运维手册自动化平台，可实现客户端设备和数据中心基础设施变更、部署的自动化。

HP Operations Manager 9.10、9.11版本在实现上存在代码执行漏洞，攻击者可利用此漏洞在受影响应用上下文中执行任意代码。

<*来源：vendor
 
  链接：https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emr_na-c04472866
 *>

建议：
厂商补丁：

HP
 --
 HP已经为此发布了一个安全公告（HPSBMU03127）以及相应补丁:
HPSBMU03127：HP Operations Manager for UNIX, Remote Code Execution
链接：https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emr_na-c04472866

 OMHPUX_00004
https://softwaresupport.hp.com/group/softwaresupport/search-result/-/fac
 etse
 arch/document/KM01188205

 ITOSOL_00802
https://softwaresupport.hp.com/group/softwaresupport/search-result/-/fac
 etse
 arch/document/KM01187924

 OML_00080
https://softwaresupport.hp.com/group/softwaresupport/search-result/-/fac
 etse
 arch/document/KM01187666

 9.11.120 Java UI patches: Component
 Download Location

 OMHPUX_00005
https://softwaresupport.hp.com/group/softwaresupport/search-result/-/fac
 etse
 arch/document/KM01187192

 ITOSOL_00803
https://softwaresupport.hp.com/group/softwaresupport/search-result/-/fac
 etse
 arch/document/KM01187435

 OML_00081
https://softwaresupport.hp.com/group/softwaresupport/search-result/-/fac
 etse
 arch/document/KM01188103

 9.20.300 server patches: Component
 Download Location

 OMHPUX_00006
https://softwaresupport.hp.com/group/softwaresupport/search-result/-/fac
 etse
 arch/document/KM01188207

 ITOSOL_00804
https://softwaresupport.hp.com/group/softwaresupport/search-result/-/fac
 etse
 arch/document/KM01188065

 OML_00082
https://softwaresupport.hp.com/group/softwaresupport/search-result/-/fac
 etse
 arch/document/KM01188209

本文永久更新链接地址：