PT-2016-1622 · Hewlett Packard · Hpe Network Switches

Publicado 2016-01-05 · Atualizado 2016-12-07 · CVE-2015-6859

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HPE Network Switches versions 15.16.x through 15.17.x

Description The issue is related to insufficient access control restrictions in the software of HPE Network Switches, allowing local users to bypass intended access restrictions.

Recommendations For versions 15.16.x through 15.17.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2016-00933

CVE-2015-6859

Produtos afetados

Hpe Network Switches

Referências · 5

• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-6859 · Nota de Segurança
• http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04920918 · Nota
• http://securitytracker.com/id/1034410 · Nota
• https://bdu.fstec.ru/vul/2016-00933 · Nota de Segurança