PT-2018-5022 · Hewlett Packard · Storevirtual Vsa+2

Published 2018-02-15 · Updated 2018-03-12 · CVE-2016-8529

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software versions prior to v12.6

Description A Remote Arbitrary Command Execution issue was discovered in the software. The problem was resolved in LeftHand OS v12.6 or any subsequent version.

Recommendations For versions prior to v12.6, update to LeftHand OS v12.6 or any subsequent version to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2016-8529

Affected Products

Hp Storevirtual 4000 Storage

Lefthand Os

Storevirtual Vsa

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-8529 · Security Note
• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05382958 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-8529 · Vendor Advisory
• http://securitytracker.com/id/1037762 · Note
• http://securityfocus.com/bid/95970 · Note