Unscored severity · published Aug 12, 2014
CVE-2014-2630
Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors
–
CVSS
7.1%
EPSS
No
On KEV
Description
Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.1% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OA
Operations Agent · HP
11.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2630
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2630
packetstormsecurity.com
http://packetstormsecurity.com/files/156206/xglance-bin-Local-Root-Privilege-Escalation.html
packetstormsecurity.com
http://packetstormsecurity.com/files/157528/HP-Performance-Monitoring-xglance-Privilege-Escalation.html
seclists.org
http://seclists.org/fulldisclosure/2020/Feb/1
secunia.com
http://secunia.com/advisories/60041
www.securitytracker.com
http://www.securitytracker.com/id/1030702
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95181
More from Operations Agent
7.5
CVE-2017-3733
During a renegotiation handshake if the Encrypt-Then-Mac extension is negotiated where it was not in the original handshake (or vice-versa) then this can cause OpenSSL 1.1.0…
–
CVE-2014-2647
Cross-site scripting (XSS) vulnerability in HP Operations Agent in HP Operations Manager (formerly OpenView Communications Broker) before 11.14 allows remote attackers to inject…
–
CVE-2012-2020
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326
–
CVE-2012-2019
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1325
–
CVE-2011-4160
Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access…
