PT-2016-1001 · Hewlett Packard · Hpe Ucmdb Browser

Published 2016-01-08 · Updated 2016-12-07 · CVE-2015-6862

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HPE UCMDB Browser versions prior to 4.02

Description The issue is related to inadequate access control, allowing remote attackers to obtain sensitive information or bypass intended access restrictions.

Recommendations For versions prior to 4.02, update to version 4.02 or later to resolve the issue.

Fix

Information Disclosure

Improper Access Control

Weakness Enumeration

CWE-200

CWE-284

Related Identifiers

BDU:2016-00064

CVE-2015-6862

Affected Products

Hpe Ucmdb Browser

References · 5

• https://bdu.fstec.ru/vul/2016-00064 · Security Note
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04924053 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6862 · Security Note
• http://securitytracker.com/id/1034596 · Note
• https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04924053 · Note