CVE-2009-2681: Unspecified vulnerability in HP ProCurve Identity Driven Manager (IDM) A.02.x through A.02.03 and A.03.x th...

Security readout for executives and security teams

This is a local privilege escalation issue in HP ProCurve Identity Driven Manager on specific Windows Server deployments. A local user could gain higher privileges through unspecified vectors. The public record does not provide severity, CVSS, exploit details, or confirmed fixes in the supplied evidence. Exposure is most likely in legacy network access control environments still running HP ProCurve IDM on the named Windows Server, IAS, or NPS combinations. Modern environments are less likely exposed unless old IDM deployments remain in service. Treat this as a legacy-system risk review item. Prioritize if IDM still supports authentication or network access decisions, especially on unsupported Windows servers. Urgency is lower than remotely exploitable issues, but unresolved privilege escalation on identity infrastructure can raise business impact. Mitigation focus: Inventory HP ProCurve IDM deployments and record exact versions.; Check HP advisory SSRT090082 for vendor-supported remediation or workaround.; Restrict local logon rights on affected IDM servers..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.