PT-2016-5924 · Hewlett Packard+1 · Hpe Xp P9000 Command View Advanced Edition+2

Publicado 2016-08-26 · Atualizado 2016-11-28 · CVE-2016-4378

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE XP P9000 Command View Advanced Edition Software versions prior to 8.4.1-00 HPE XP7 Command View Advanced Edition Suite versions prior to 8.4.1-00

Description The issue allows remote attackers to obtain sensitive information via unspecified vectors, affecting multiple components including the Device Manager, Tiered Storage Manager, Replication Manager, Replication Monitor, and Hitachi Automation Director (HAD) in HPE XP P9000 Command View Advanced Edition Software and XP7 Command View Advanced Edition Suite.

Recommendations For HPE XP P9000 Command View Advanced Edition Software versions prior to 8.4.1-00, update to version 8.4.1-00 or later. For HPE XP7 Command View Advanced Edition Suite versions prior to 8.4.1-00, update to version 8.4.1-00 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-4378

Produtos afetados

Hpe Xp P9000 Command View Advanced Edition

Hpe Xp7 Command View Advanced Edition (Cvae) Suite

Hitachi Automation Director

Referências · 5

• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05241355 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4378 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-4378 · Aviso do Fabricante
• http://securitytracker.com/id/1036686 · Nota
• http://securityfocus.com/bid/92649 · Nota