PT-2016-5927
CVE-2016-4381
·
Published
2016-09-08
·
Updated
2016-11-28
Description by
CVSS 3.1
4.5
MediumMetricsAV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
HPE XP7 Command View Advanced Edition (CVAE) Suite versions 6.x through 8.x before 8.4.1-02
Description
The issue allows local users to bypass intended access restrictions. This occurs when Replication Manager (RepMgr) and Device Manager (DevMgr) are enabled. The estimated number of potentially affected devices and details about real-world incidents are not provided.
Recommendations
For versions 6.x through 8.x before 8.4.1-02, update to version 8.4.1-02 or later to resolve the issue. As a temporary workaround, consider disabling Replication Manager (RepMgr) and Device Manager (DevMgr) until the update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾