PT-2018-5010 · Hewlett Packard · Hp Version Control Repository Manager

Publicado 2018-02-15 · Atualizado 2018-03-06 · CVE-2016-8515

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE Version Control Repository Manager (VCRM) versions prior to 7.6

Description A remote malicious file upload issue was discovered. This issue affects all versions prior to the fixed version.

Recommendations For versions prior to 7.6, update to version 7.6 or later to resolve the issue.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2016-8515

Produtos afetados

Hp Version Control Repository Manager

Referências · 6

• https://osv.dev/vulnerability/CVE-2016-8515 · Aviso do Fabricante
• http://securitytracker.com/id/1037485 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-8515 · Nota de Segurança
• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05356363 · Aviso do Fabricante
• http://securityfocus.com/bid/94949 · Nota
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 · Aviso do Fabricante