PT-2019-2853 · Hewlett Packard · Hp Support Assistant

Publicado 2019-06-23 · Atualizado 2020-08-24 · CVE-2019-6329

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HP Support Assistant versions 8.7.50 and earlier

Description The issue is related to insufficient access control in the HP Support Assistant software, allowing a user to gain system privileges. This can lead to unauthorized modification of directories or files.

Recommendations For HP Support Assistant versions 8.7.50 and earlier, update to a version later than 8.7.50 to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2019-02818

CVE-2019-6329

Produtos afetados

Hp Support Assistant

Referências · 7

• 🔥 https://github.com/ManhNDd/CVE-2019-6329 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-6329 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-02818 · Nota de Segurança
• https://t.me/cybersecuritytechnologies/510 · Publicação no Telegram
• https://support.hp.com/us-en/document/c06388027 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6329 · Aviso do Fabricante
• http://securityfocus.com/bid/108891 · Nota