PT-2016-4951

CVE-2016-1997

·

Published

2016-03-22

·

Updated

2016-12-01

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions HPE Operations Orchestration versions 10.x before 10.51 HPE Operations Orchestration content versions before 1.7.0
Description The issue allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
Recommendations For HPE Operations Orchestration versions 10.x before 10.51, update to version 10.51 or later. For HPE Operations Orchestration content versions before 1.7.0, update to version 1.7.0 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
Related identifiers
CVE-2016-1997
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com