HPSBGN03561 rev.2 - HP Support Assistant Potential Escalation of Privilege

Potential Security Impact

Escalation of privilege and unauthorized modification of directories or files.

Source: HP, HP Product Security Response Team (PSRT)

Reported by: Danny Wei of Tencent’s Xuanwu Lab

VULNERABILITY SUMMARY

The vulnerability allows attacker to extract binaries into protected file system locations.

RESOLUTION

A patch was released on July 11, 2017 which will automatically update HP Support Assistant clients. This patch is applied in version 12.7.26.1 of the Framework which is part of HP Support Assistant.

To manually update HP Support Assistant to the latest version, please follow the steps below:

1. Open HP Support Assistant from the start menu.

2. Click About in the top right.

3. The latest version of the Framework containing the fix is 12.7.27.15.

4. If this version or later of the Framework is not installed, select Check for latest version to install it.