[email protected]CVE-2015-6857

HistoryNov 26, 2015 - 3:59 a.m.

CVE-2015-6857

2015-11-2603:59:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2015-6857

vts

hp loadrunner

remote code execution

security vulnerability

zdi-can-3138

7.8 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.213 Low

EPSS

Percentile

96.4%

JSON

Unspecified vulnerability in Virtual Table Server (VTS) in HP LoadRunner 11.52, 12.00, 12.01, 12.02, and 12.50 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-3138.

CPENameOperatorVersion
hp:loadrunnerhp loadrunnereq12.01
hp:loadrunnerhp loadrunnereq12.50
hp:loadrunnerhp loadrunnereq11.52
hp:loadrunnerhp loadrunnereq12.02
hp:loadrunnerhp loadrunnereq12.00
hp:performance_centerhp performance centereq12.01
hp:performance_centerhp performance centereq12.50
hp:performance_centerhp performance centereq12.00
hp:performance_centerhp performance centereq11.52
hp:performance_centerhp performance centereq12.20

CPE	Name	Operator	Version
hp:loadrunner	hp loadrunner	eq	12.01
hp:loadrunner	hp loadrunner	eq	12.50
hp:loadrunner	hp loadrunner	eq	11.52
hp:loadrunner	hp loadrunner	eq	12.02
hp:loadrunner	hp loadrunner	eq	12.00
hp:performance_center	hp performance center	eq	12.01
hp:performance_center	hp performance center	eq	12.50
hp:performance_center	hp performance center	eq	12.00
hp:performance_center	hp performance center	eq	11.52
hp:performance_center	hp performance center	eq	12.20

References

www.securityfocus.com/bid/77946

www.securitytracker.com/id/1034259

www.zerodayinitiative.com/advisories/ZDI-15-581

h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04900820

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04907374

7.8 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.213 Low

EPSS

Percentile

96.4%

JSON

Related for CVE-2015-6857

cvelist1 nessus2 zdi1 prion1