PT-2016-1436 · Hewlett Packard · Hp System Management Homepage

Publicado 2016-03-18 · Atualizado 2016-12-03 · CVE-2016-1994

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.5.4

Description The issue is related to the lack of protection for service data, allowing remote authenticated users to obtain sensitive information.

Recommendations For versions prior to 7.5.4, update to version 7.5.4 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2016-00737

CVE-2016-1994

Produtos afetados

Hp System Management Homepage

Referências · 6

• https://bdu.fstec.ru/vul/2016-00737 · Nota de Segurança
• http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05045763 · Nota
• https://osv.dev/vulnerability/CVE-2016-1994 · Aviso do Fabricante
• http://securitytracker.com/id/1035325 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-1994 · Nota de Segurança
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763 · Aviso do Fabricante