Lucene search

HP Product Security Response TeamHPSBPY03960

HistoryAug 05, 2024 - 12:00 a.m.

Clariti Manager - Outdated JavaScript Libraries In-Use

2024-08-0500:00:00

HP Product Security Response Team

support.hp.com

poly clariti manager

firmware vulnerability

javascript libraries

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.4

Confidence

High

JSON

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware contained multiple XSS vulnerabilities in the version of JavaScript used.

The recommendation is to update an impacted device to firmware build 10.12.0.2_100 or later. Customers can receive the latest builds through Poly Lens Management Console.

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.4

Confidence

High

JSON

Related for HPSBPY03960