CVE-2016-4394
medium
CVSS v3
6.5
CVSS v2
5.8
VIR risk
6.5
Description
HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue.
Predictions
Exploit likelihood
75%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: security-alert@hpe.com — https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| hp | system_management_homepage | {"endIncluding":"7.5.5.0"} | |
References
- http://www.securityfocus.com/bid/93961
- https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
- http://www.securityfocus.com/bid/93961
- https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722
CWEs
CWE-254
Verify integrity in audit chain (admin only). AS-IS.