PT-2016-4955 · Hewlett Packard+1 · Hpe Xp P9000 Command View Advanced Edition+2

Publicado

2016-04-20

·

Atualizado

2016-12-01

·

CVE-2016-2003

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions HPE P9000 Command View Advanced Edition Software (CVAE) versions 7.x through 8.x before 8.4.0-00 XP7 CVAE versions 7.x through 8.x before 8.4.0-00
Description The issue allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Recommendations For HPE P9000 Command View Advanced Edition Software (CVAE) versions 7.x through 8.x before 8.4.0-00, update to version 8.4.0-00 or later. For XP7 CVAE versions 7.x through 8.x before 8.4.0-00, update to version 8.4.0-00 or later.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2016-2003

Produtos afetados

Apache Commons Collections
Hpe Xp P9000 Command View Advanced Edition
Xp7 Cvae