PT-2016-5927

CVE-2016-4381

·

Published

2016-09-08

·

Updated

2016-11-28

Description by

CVSS 3.1
4.5
Medium
MetricsAV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions HPE XP7 Command View Advanced Edition (CVAE) Suite versions 6.x through 8.x before 8.4.1-02
Description The issue allows local users to bypass intended access restrictions. This occurs when Replication Manager (RepMgr) and Device Manager (DevMgr) are enabled. The estimated number of potentially affected devices and details about real-world incidents are not provided.
Recommendations For versions 6.x through 8.x before 8.4.1-02, update to version 8.4.1-02 or later to resolve the issue. As a temporary workaround, consider disabling Replication Manager (RepMgr) and Device Manager (DevMgr) until the update is applied.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾