PT-2019-17648 · Hewlett Packard · Repmgr+3

Published 2019-08-09 · Updated 2020-08-24 · CVE-2019-5408

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HP Command View Advanced Edition (CVAE) versions prior to 8.6.1-02 DevMgr versions 7.0.0-00 through 8.6.1-02 RepMgr versions (affected when installed on the same machine as DevMgr) TSMgr versions (affected when installed on the same machine as DevMgr)

Description A vulnerability in the Device Manager GUI of Command View Advanced Edition (CVAE) products could expose configuration information of hosts and storage systems managed by the Device Manager server.

Recommendations For DevMgr versions 7.0.0-00 through 8.6.1-02, upgrade to version 8.6.2-02 or later. For RepMgr and TSMgr installed on the same machine as DevMgr, upgrade DevMgr to version 8.6.2-02 or later to correct the issue.

Fix

Related Identifiers

CVE-2019-5408

Affected Products

Devmgr

Hp Command View Advanced Edition

Repmgr

Tsmgr

References · 3

• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03938en_us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5408 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5408 · Security Note