What’s Vulnerable › Vulnerabilities

CVE-2011-4788

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-01-13 · updated 2026-06-16
• Weakness: CWE-22

Description

Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arbitrary files via a pathname in the URI.

Affected products

• HP Storageworks P2000 G3 Msa Fc/Iscsi Dual Combo Controller Lff Array System: aw567a
• HP Storageworks P2000 G3 Msa Fibre Channel Dual Controller Lff Array System: ap845a
• HP Storageworks P2000 G3 Msa Fibre Channel Dual Controller Sff Array System: ap846a

References

• http://archives.neohapsis.com/archives/bugtraq/2012-01/0088.html
• http://marc.info/?l=bugtraq&m=132672509901841&w=2
• http://zerodayinitiative.com/advisories/ZDI-12-015/
• http://archives.neohapsis.com/archives/bugtraq/2012-01/0088.html
• http://marc.info/?l=bugtraq&m=132672509901841&w=2
• http://zerodayinitiative.com/advisories/ZDI-12-015/

Get alerted when CVE-2011-4788 or the next vulnerability affects your stack