CVE-2016-4372

Name of the Vulnerable Software and Affected Versions HPE iMC PLAT versions prior to 7.2 E0403P04 HPE iMC EAD versions prior to 7.2 E0405P05 HPE iMC APM versions prior to 7.2 E0401P04 HPE iMC NTA versions prior to 7.2 E0401P01 HPE iMC BIMS versions prior to 7.2 E0402P02 HPE iMC UAM TAM versions prior to 7.2 E0405P05

Description The issue allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

Recommendations For HPE iMC PLAT versions prior to 7.2 E0403P04, update to version 7.2 E0403P04 or later. For HPE iMC EAD versions prior to 7.2 E0405P05, update to version 7.2 E0405P05 or later. For HPE iMC APM versions prior to 7.2 E0401P04, update to version 7.2 E0401P04 or later. For HPE iMC NTA versions prior to 7.2 E0401P01, update to version 7.2 E0401P01 or later. For HPE iMC BIMS versions prior to 7.2 E0402P02, update to version 7.2 E0402P02 or later. For HPE iMC UAM TAM versions prior to 7.2 E0405P05, update to version 7.2 E0405P05 or later.