PT-2018-4921 · Hewlett Packard+1 · Hp Business Service Management+1

Published 2018-08-06 · Updated 2018-10-05 · CVE-2016-4405

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HP Business Service Management (BSM) versions v9.20 through v9.26

Description A remote code execution issue was identified in HP Business Service Management (BSM) using Apache Commons Collection Java Deserialization.

Recommendations For HP Business Service Management (BSM) versions v9.20 through v9.26, update to a version outside of the affected range to resolve the issue.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2016-4405

Affected Products

Apache Commons Collections

Hp Business Service Management

References · 4

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05327447 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4405 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4405 · Security Note
• http://securityfocus.com/bid/94183 · Note