PT-2015-1373 · Hewlett Packard · Hp Nonstop Safeguard Security

Publicado 2015-05-25 · Atualizado 2016-12-03 · CVE-2015-2123

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP NonStop Safeguard Security Software versions H06.x, L15.02, and J06.x through J06.18

Description The issue is related to insufficient access control for certain functions, which can be exploited by a remote attacker to gain elevated privileges using advanced access control features.

Recommendations For versions H06.x, consider restricting access to advanced access control features until a fix is available. For version L15.02, restrict the use of Expand access functionality to minimize the risk of exploitation. For versions J06.x through J06.18, avoid using the Expand access feature in the affected software until the issue is resolved.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2015-10466

CVE-2015-2123

Produtos afetados

Hp Nonstop Safeguard Security

Referências · 4

• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04683599 · Aviso do Fabricante
• http://securityfocus.com/bid/74819 · Nota
• https://bdu.fstec.ru/vul/2015-10466 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-2123 · Nota de Segurança