Authentication Bypass Vulnerability in HP Vertica 7.1.1 UDx (ZDI-CAN-2914)

Authentication Bypass Vulnerability in HP Vertica 7.1.1 UDx (ZDI-CAN-2914)

CVE-2015-6867 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which allows remote attackers to execute arbitrary commands via a crafted packet, aka ZDI-CAN-2914.

Learn more about our Web Application Penetration Testing UK.