CVE-2008-3539
Unspecified vulnerability in HP OpenView Select Identity (HPSI) Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and earlier, HPSI IBM Tivoli Dir Connector 1.02 and earlier, HPSI TOPSecret Connector 2.22.001 and earlier, HPSI RACF Connector 1.12.001 and earlier, HPSI ACF2 Connector 1.02 and earlier, HPSI OpenLDAP Connector 1.02 and earlier, and HPSI BiDir DirX Connector 1.00.003 and earlier, allows local users to obtain sensitive information via unknown vectors.
Key facts
- CVSS score
- 2.1 (v2.0)
- Severity
- LOW
- CVSS vector
AV:L/AC:L/Au:N/C:P/I:N/A:N- Weakness (CWE)
- CWE-200
- EPSS score
- 0.4% (38th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2008-3525)
- Published
- September 11, 2008
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2008-3525 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- hp / hpsi acf2 connector
- hp / hpsi active directory connector
- hp / hpsi bidir dirx connector
- hp / hpsi edirectory connector
- hp / hpsi etrust connector
- hp / hpsi oid connector
- hp / hpsi openldap connector
- hp / hpsi racf connector
- hp / hpsi sunone connector
- hp / hpsi topsecret connector
- hp / ibm tivoli dir connector
- microsoft / windows
References
- http://marc.info/?l=bugtraq&m=122062779731581&w=2(Patch)
- http://secunia.com/advisories/31764
- http://securityreason.com/securityalert/4236
- http://securitytracker.com/id?1020821
- http://www.securityfocus.com/bid/31024
- http://www.vupen.com/english/advisories/2008/2501
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44916
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain