CVE-2015-5411
medium
CVSS v3
—
CVSS v2
6.8
VIR risk
6.8
Description
HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to obtain sensitive information via unspecified vectors.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: hp-security-alert@hp.com — https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04765115
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| hp | version_control_repository_manager | {"endIncluding":"7.4.0"} | |
References
CWEs
CWE-200
Verify integrity in audit chain (admin only). AS-IS.