HP Insight Control Server Migration 7.3.0 and 7.3.1 OpenSSL Heartbeat Information Disclosure (Heartbleed)
High Nessus Plugin ID 76463
Synopsis
The remote Windows host has migration software installed that is affected by an information disclosure vulnerability.
Description
According to its version, the HP Insight Control Server Migration install on the remote Windows host includes a bundled copy of OpenSSL that is affected by an information disclosure vulnerability. A remote attacker could read the contents of up to 64KB of server memory, potentially exposing passwords, private keys, and other sensitive data.
Solution
Update to HP Insight Control Server Migration 7.3.2, which is included with the HP Insight Management 7.0.3a incremental update.