Vulnerability CVE-2016-8529
Published: 2018-02-15

Description:
A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version.

Type:

CWE-284

 (Improper Access Control)

CVSS2 => (AV:A/AC:L/Au:N/C:P/I:P/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.3/10
8.5/10
6.5/10
Exploit range
Attack complexity
Authentication
Adjacent network
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Complete
Affected software
HP -> Lefthand 

 References:
http://www.securityfocus.com/bid/95970
http://www.securitytracker.com/id/1037762
https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c05382958
Copyright 2024, cxsecurity.com

 

Back to Top