Lucene search

[email protected]CVE-2007-4931

HistorySep 18, 2007 - 6:17 p.m.

CVE-2007-4931

2007-09-1818:17:00

[email protected]

web.nvd.nist.gov

smh

openssl

vulnerabilities

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.7%

JSON

HP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manager, leaves old OpenSSL software active after an OpenSSL update, which has unknown impact and attack vectors, probably related to previous vulnerabilities for OpenSSL.

Affected configurations

NVD

Node

hpsystem_management_homepageMatch2.0.0

hpsystem_management_homepageMatch2.0.1

hpsystem_management_homepageMatch2.0.2

hpsystem_management_homepageMatch2.1

hpsystem_management_homepageMatch2.1.1

hpsystem_management_homepageMatch2.1.2

hpsystem_management_homepageMatch2.1.3

hpsystem_management_homepageMatch2.1.3.132

hpsystem_management_homepageMatch2.1.4

hpsystem_management_homepageMatch2.1.5

hpsystem_management_homepageMatch2.1.6

hpsystem_management_homepageMatch2.1.7

hpsystem_management_homepageMatch2.1.8

hpsystem_management_homepageMatch2.1.9

CPENameOperatorVersion
hp:system_management_homepagehp system management homepageeq2.0.0
hp:system_management_homepagehp system management homepageeq2.0.1
hp:system_management_homepagehp system management homepageeq2.0.2
hp:system_management_homepagehp system management homepageeq2.1
hp:system_management_homepagehp system management homepageeq2.1.1
hp:system_management_homepagehp system management homepageeq2.1.2
hp:system_management_homepagehp system management homepageeq2.1.3
hp:system_management_homepagehp system management homepageeq2.1.3.132
hp:system_management_homepagehp system management homepageeq2.1.4
hp:system_management_homepagehp system management homepageeq2.1.5

CPE	Name	Operator	Version
hp:system_management_homepage	hp system management homepage	eq	2.0.0
hp:system_management_homepage	hp system management homepage	eq	2.0.1
hp:system_management_homepage	hp system management homepage	eq	2.0.2
hp:system_management_homepage	hp system management homepage	eq	2.1
hp:system_management_homepage	hp system management homepage	eq	2.1.1
hp:system_management_homepage	hp system management homepage	eq	2.1.2
hp:system_management_homepage	hp system management homepage	eq	2.1.3
hp:system_management_homepage	hp system management homepage	eq	2.1.3.132
hp:system_management_homepage	hp system management homepage	eq	2.1.4
hp:system_management_homepage	hp system management homepage	eq	2.1.5

Rows per page:

1-10 of 141

References

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01164065

osvdb.org/45941

securitytracker.com/id?1018696

www.securityfocus.com/bid/25675

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.7%

JSON

Related for CVE-2007-4931

cvelist1 prion1 nvd1