PT-2016-1002 · Hewlett Packard · Hpe Network Switches

Publicado 2016-01-05 · Atualizado 2016-12-07 · CVE-2015-6860

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HPE Network Switches versions 15.16.x through 15.17.x

Description The issue is related to insufficient access control restrictions in the software of HPE Network Switches, allowing local users to bypass intended access restrictions.

Recommendations For versions 15.16.x through 15.17.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2016-00065

CVE-2015-6860

Produtos afetados

Hpe Network Switches

Referências · 5

• https://bdu.fstec.ru/vul/2016-00065 · Nota de Segurança
• http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04920918 · Nota
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918 · Aviso do Fabricante
• http://securitytracker.com/id/1034410 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-6860 · Nota de Segurança