VULNERABILITY INTELLIGENCE

CVE-2011-1736

CVSS score8.5 HIGH
EPSS probability9.77%
CISA KEVNot currently listed
Published2011-05-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:P

Description

Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GET_FILE message.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references