CVE-2013-4813

CRITICAL 10.0CVE-2013-4813 · Published 16/09/2013 · updated 16/06/2026

In short

CVE-2013-4813 is a CRITICAL (CVSS 10.0) vulnerability affecting identity driven manager (hp), procurve manager (hp).
Chance of exploitation in the next 30 days (EPSS): 8.5%, higher than 95.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
identity driven manager hp	`= 4.0`	No fix yet
procurve manager hp	`= 3.20= 4.0`	No fix yet

Description

The Agent (aka AgentController) servlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allows remote attackers to execute arbitrary commands via a HEAD request, aka ZDI-CAN-1745.

References

h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay · Vendor Advisory
secunia.com/advisories/54788
securitytracker.com/id/1029010
zerodayinitiative.com/advisories/ZDI-13-228

More vulnerabilities in identity driven manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free