|CVSS SCORE||10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)|
Business Process Monitor
The specific flaw exists in the handling of requests to the tp_bpm_admin.exe server which listens by default on TCP port 2696. This server exposes file upload functionality that is vulnerable to a directory traversal. This can be leveraged by an attacker to gain remote code execution under the context of SYSTEM.
Hewlett-Packard has issued an update to correct this vulnerability. More details can be found at:
|CREDIT||Andrea Micalizzi aka rgod