PT-2016-5927 · Hewlett Packard · Hpe Xp7 Command View Advanced Edition (Cvae) Suite

Publicado 2016-09-08 · Atualizado 2016-11-28 · CVE-2016-4381

Positive Technologies (AI Summary)

CVSS v3.1

4.5

Média

Vetor base

AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions HPE XP7 Command View Advanced Edition (CVAE) Suite versions 6.x through 8.x before 8.4.1-02

Description The issue allows local users to bypass intended access restrictions. This occurs when Replication Manager (RepMgr) and Device Manager (DevMgr) are enabled. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations For versions 6.x through 8.x before 8.4.1-02, update to version 8.4.1-02 or later to resolve the issue. As a temporary workaround, consider disabling Replication Manager (RepMgr) and Device Manager (DevMgr) until the update is applied.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-4381

Produtos afetados

Hpe Xp7 Command View Advanced Edition (Cvae) Suite

Referências · 4

• http://securityfocus.com/bid/92733 · Nota
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05257711 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-4381 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-4381 · Aviso do Fabricante