CVE-2014-7882 HP SiteScope, Remote Elevation of Privilege and Remote Authentication Bypass Vulnerability.

HP SiteScope is an agent less monitoring application.

A potential security vulnerability has been identified with HP SiteScope. The vulnerability could be exploited remotely to allow elevation of privilege.(CVE-2014-7882)
A potential security vulnerability has been identified with HP SiteScope. The vulnerability could be exploited remotely to allow bypass of authentication.(CVE-2014-2614)

Affected Versions
HP SiteScope v11.1x and v11.2x

Sucessful exploitation of the vulnerabilities may lead to information disclosure.

For more information regarding mitigation procedures, please click here.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

HPSBMU03232 : Windows