Lucene search

[email protected]CVE-2016-2012

HistoryMay 07, 2016 - 10:59 a.m.

CVE-2016-2012

2016-05-0710:59:09

CWE-287

[email protected]

web.nvd.nist.gov

cve-2016-2012

hpe

network node manager

nnmi

authentication bypass

remote attack

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.2%

JSON

HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to bypass authentication via unspecified vectors.

Affected configurations

NVD

Node

hpnetwork_node_manager_iMatch9.20

hpnetwork_node_manager_iMatch9.23

hpnetwork_node_manager_iMatch9.24

hpnetwork_node_manager_iMatch9.25

hpnetwork_node_manager_iMatch10.00

hpnetwork_node_manager_iMatch10.01

CPENameOperatorVersion
hp:network_node_manager_ihp network node manager ieq9.20
hp:network_node_manager_ihp network node manager ieq9.23
hp:network_node_manager_ihp network node manager ieq9.24
hp:network_node_manager_ihp network node manager ieq9.25
hp:network_node_manager_ihp network node manager ieq10.00
hp:network_node_manager_ihp network node manager ieq10.01

CPE	Name	Operator	Version
hp:network_node_manager_i	hp network node manager i	eq	9.20
hp:network_node_manager_i	hp network node manager i	eq	9.23
hp:network_node_manager_i	hp network node manager i	eq	9.24
hp:network_node_manager_i	hp network node manager i	eq	9.25
hp:network_node_manager_i	hp network node manager i	eq	10.00
hp:network_node_manager_i	hp network node manager i	eq	10.01

References

www.securitytracker.com/id/1035767

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05103564

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.2%

JSON

Related for CVE-2016-2012

prion1 cvelist1 nvd1