Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Compaq Web Based Management Agent Proxy Vulnerability

Information

Severity

Severity

High

Family

Family

Web application abuses

CVSSv2 Base

CVSSv2 Base

7.5

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Solution Type

Solution Type

Vendor Patch

Created

Created

18 years ago

Modified

Modified

5 years ago

Summary

This host is running the Compaq Web Management Agent. This service can be used as a HTTP proxy. An attacker can use this to bypass firewall rules or hide the source of web-based attacks.

Solution

Solution

Due to the information leak associated with this service, we recommend that you disable the Compaq Management Agent or filter access to TCP ports 2301 and 280. If this service is required, installing the appropriate upgrade from Compaq will fix this issue. The software update for the operating system and hardware can be found via Compaq's support download page. For more information, please see the referenced vendor advisory.

Common Vulnerabilities and Exposures (CVE)