Lucene search

[email protected]CVE-2016-1998

HistoryMar 22, 2016 - 10:59 a.m.

CVE-2016-1998

2016-03-2210:59:01

CWE-20

[email protected]

web.nvd.nist.gov

cve-2016-1998

hpe

service manager

sm 9.3x

sm 9.4x

remote attack

arbitrary commands

java object

apache commons collections

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

70.7%

JSON

HPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Affected configurations

NVD

Node

hpservice_managerMatch9.30

hpservice_managerMatch9.31

hpservice_managerMatch9.32

hpservice_managerMatch9.33

hpservice_managerMatch9.34

hpservice_managerMatch9.35

hpservice_managerMatch9.40

hpservice_managerMatch9.41

CPENameOperatorVersion
hp:service_managerhp service managereq9.30
hp:service_managerhp service managereq9.31
hp:service_managerhp service managereq9.32
hp:service_managerhp service managereq9.33
hp:service_managerhp service managereq9.34
hp:service_managerhp service managereq9.35
hp:service_managerhp service managereq9.40
hp:service_managerhp service managereq9.41

CPE	Name	Operator	Version
hp:service_manager	hp service manager	eq	9.30
hp:service_manager	hp service manager	eq	9.31
hp:service_manager	hp service manager	eq	9.32
hp:service_manager	hp service manager	eq	9.33
hp:service_manager	hp service manager	eq	9.34
hp:service_manager	hp service manager	eq	9.35
hp:service_manager	hp service manager	eq	9.40
hp:service_manager	hp service manager	eq	9.41

References

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054565

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

70.7%

JSON

Related for CVE-2016-1998

prion1 openvas1 nvd1 cvelist1 impervablog1