PT-2015-2783 · Hewlett Packard · Accesscontrol

Published 2015-05-25 · Updated 2019-10-09 · CVE-2015-2118

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions HP Access Control (AC) Software versions 12.x through 14.x before 14.1.2

Description The issue is related to unspecified vulnerabilities in the Secure Pull Print and Security Pull Print components. These vulnerabilities can be exploited by remote authenticated users to obtain sensitive information. The vulnerabilities are associated with coding errors in the components.

Recommendations For HP Access Control (AC) Software versions 12.x through 14.x before 14.1.2, update to version 14.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the Secure Pull Print and Security Pull Print components until a patch is available.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-12148

CVE-2015-2118

Affected Products

Accesscontrol

References · 3

• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04649315 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-12148 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-2118 · Security Note