PT-2019-2587 · Hewlett Packard · Hp Support Assistant

Published 2019-06-25 · Updated 2020-08-24 · CVE-2019-6328

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HP Support Assistant versions 8.7.50 and earlier

Description The issue is related to insufficient access control in the HP Support Assistant software, allowing a user to gain system privileges. This can lead to unauthorized modification of directories or files.

Recommendations For HP Support Assistant versions 8.7.50 and earlier, update to a version later than 8.7.50 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2019-02466

CVE-2019-6328

Affected Products

Hp Support Assistant

References · 6

• https://support.hp.com/us-en/document/c06388027 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02466 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-6328 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6328 · Vendor Advisory
• https://securityfocus.com/bid/108891 · Note
• http://securityfocus.com/bid/108891 · Note