PT-2018-5022 · Hewlett Packard · Storevirtual Vsa+2

Publicado 2018-02-15 · Atualizado 2018-03-12 · CVE-2016-8529

Positive Technologies (AI Summary)

CVSS v3.1

7.6

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software versions prior to v12.6

Description A Remote Arbitrary Command Execution issue was discovered in the software. The problem was resolved in LeftHand OS v12.6 or any subsequent version.

Recommendations For versions prior to v12.6, update to LeftHand OS v12.6 or any subsequent version to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-8529

Produtos afetados

Hp Storevirtual 4000 Storage

Lefthand Os

Storevirtual Vsa

Referências · 5

• http://securitytracker.com/id/1037762 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-8529 · Nota de Segurança
• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05382958 · Aviso do Fabricante
• http://securityfocus.com/bid/95970 · Nota
• https://osv.dev/vulnerability/CVE-2016-8529 · Aviso do Fabricante