PT-2018-4921 · Hewlett Packard+1 · Hp Business Service Management+1

Publicado 2018-08-06 · Atualizado 2018-10-05 · CVE-2016-4405

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HP Business Service Management (BSM) versions v9.20 through v9.26

Description A remote code execution issue was identified in HP Business Service Management (BSM) using Apache Commons Collection Java Deserialization.

Recommendations For HP Business Service Management (BSM) versions v9.20 through v9.26, update to a version outside of the affected range to resolve the issue.

Correção

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2016-4405

Produtos afetados

Apache Commons Collections

Hp Business Service Management

Referências · 4

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05327447 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-4405 · Aviso do Fabricante
• http://securityfocus.com/bid/94183 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-4405 · Nota de Segurança