PT-2018-5010 · Hewlett Packard · Hp Version Control Repository Manager

Published 2018-02-15 · Updated 2018-03-06 · CVE-2016-8515

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE Version Control Repository Manager (VCRM) versions prior to 7.6

Description A remote malicious file upload issue was discovered. This issue affects all versions prior to the fixed version.

Recommendations For versions prior to 7.6, update to version 7.6 or later to resolve the issue.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2016-8515

Affected Products

Hp Version Control Repository Manager

References · 6

• https://osv.dev/vulnerability/CVE-2016-8515 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8515 · Security Note
• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05356363 · Vendor Advisory
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 · Vendor Advisory
• http://securitytracker.com/id/1037485 · Note
• http://securityfocus.com/bid/94949 · Note