PT-2015-1373

CVE-2015-2123

·

Published

2015-05-25

·

Updated

2016-12-03

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions HP NonStop Safeguard Security Software versions H06.x, L15.02, and J06.x through J06.18
Description The issue is related to insufficient access control for certain functions, which can be exploited by a remote attacker to gain elevated privileges using advanced access control features.
Recommendations For versions H06.x, consider restricting access to advanced access control features until a fix is available. For version L15.02, restrict the use of Expand access functionality to minimize the risk of exploitation. For versions J06.x through J06.18, avoid using the Expand access feature in the affected software until the issue is resolved.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾