PT-2016-5924 · Hewlett Packard+1 · Hpe Xp P9000 Command View Advanced Edition+2

Published 2016-08-26 · Updated 2016-11-28 · CVE-2016-4378

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE XP P9000 Command View Advanced Edition Software versions prior to 8.4.1-00 HPE XP7 Command View Advanced Edition Suite versions prior to 8.4.1-00

Description The issue allows remote attackers to obtain sensitive information via unspecified vectors, affecting multiple components including the Device Manager, Tiered Storage Manager, Replication Manager, Replication Monitor, and Hitachi Automation Director (HAD) in HPE XP P9000 Command View Advanced Edition Software and XP7 Command View Advanced Edition Suite.

Recommendations For HPE XP P9000 Command View Advanced Edition Software versions prior to 8.4.1-00, update to version 8.4.1-00 or later. For HPE XP7 Command View Advanced Edition Suite versions prior to 8.4.1-00, update to version 8.4.1-00 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-4378

Affected Products

Hpe Xp P9000 Command View Advanced Edition

Hpe Xp7 Command View Advanced Edition (Cvae) Suite

Hitachi Automation Director

References · 5

• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05241355 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4378 · Security Note
• https://osv.dev/vulnerability/CVE-2016-4378 · Vendor Advisory
• http://securitytracker.com/id/1036686 · Note
• http://securityfocus.com/bid/92649 · Note