PT-2019-17648
CVE-2019-5408
·
Published
2019-08-09
·
Updated
2020-08-24
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
HP Command View Advanced Edition (CVAE) versions prior to 8.6.1-02
DevMgr versions 7.0.0-00 through 8.6.1-02
RepMgr versions (affected when installed on the same machine as DevMgr)
TSMgr versions (affected when installed on the same machine as DevMgr)
Description
A vulnerability in the Device Manager GUI of Command View Advanced Edition (CVAE) products could expose configuration information of hosts and storage systems managed by the Device Manager server.
Recommendations
For DevMgr versions 7.0.0-00 through 8.6.1-02, upgrade to version 8.6.2-02 or later.
For RepMgr and TSMgr installed on the same machine as DevMgr, upgrade DevMgr to version 8.6.2-02 or later to correct the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾