CVE-2007-5289

HP Mercury Quality Center < 9.2 - Remote Code Execution via Open Test Architecture API

Title source: llm
STIX 2.1

Description

HP Mercury Quality Center (QC) 9.2 and earlier, and possibly TestDirector, relies on cached client-side scripts to implement "workflow" and decisions about the "capability" of a user, which allows remote attackers to execute arbitrary code via crafted use of the Open Test Architecture (OTA) API, as demonstrated by modifying (1) common.tds, (2) defects.tds, (3) manrun.tds, (4) req.tds, (5) testlab.tds, or (6) testplan.tds in %tmp%\TD_80, and then setting the file's properties to read-only.

References (8)

Core 8
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34046
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/501177/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/33854
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34015
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/48860
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/898865
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/501219/100/0/threaded

Scores

EPSS 0.2551
EPSS Percentile 96.3%

Details

CWE
CWE-264
Status published
Products (5)
hp/mercury_quality_center 8.0
hp/mercury_quality_center 8.2 (2 CPE variants)
hp/mercury_quality_center 9.0
hp/mercury_quality_center < 9.2
hp/testdirector
Published Feb 24, 2009
Tracked Since Feb 18, 2026