PT-2016-1001 · Hewlett Packard · Hpe Ucmdb Browser

Publicado 2016-01-08 · Atualizado 2016-12-07 · CVE-2015-6862

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HPE UCMDB Browser versions prior to 4.02

Description The issue is related to inadequate access control, allowing remote attackers to obtain sensitive information or bypass intended access restrictions.

Recommendations For versions prior to 4.02, update to version 4.02 or later to resolve the issue.

Correção

Information Disclosure

Improper Access Control

Enumeração de Fraquezas

CWE-200

CWE-284

Identificadores relacionados

BDU:2016-00064

CVE-2015-6862

Produtos afetados

Hpe Ucmdb Browser

Referências · 5

• http://securitytracker.com/id/1034596 · Nota
• https://bdu.fstec.ru/vul/2016-00064 · Nota de Segurança
• https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04924053 · Nota
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04924053 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-6862 · Nota de Segurança