Lucene search

K
cve[email protected]CVE-2017-12553
HistoryFeb 15, 2018 - 10:29 p.m.

CVE-2017-12553

2018-02-1522:29:00
NVD-CWE-noinfo
web.nvd.nist.gov
45
cve-2017-12553
authentication bypass
hpe
system management homepage
windows
linux
nvd

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

6.8 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:H/Au:S/C:C/I:C/A:N

0.0004 Low

EPSS

Percentile

5.2%

A local authentication bypass vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found.

5.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

6.8 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:H/Au:S/C:C/I:C/A:N

0.0004 Low

EPSS

Percentile

5.2%

Related for CVE-2017-12553