CVE-2019-5408

CVE-2019-5408 affects HPE CVAE (Command View Advanced Edition) products, enabling an information disclosure of hosts/storage configuration via the Device Manager GUI. Affected stack: DevMgr 7.0.0-00 up to

CVE-2019-5408: Undefined Security Weakness

Command View Advanced Edition CVAE products contain a vulnerability that could expose configuration information of hosts and storage systems that are managed by Device Manager server. This problem is due to a vulnerability in Device Manager GUI. The following products are affected. DevMgr version...

PT-2019-17648

Name of the Vulnerable Software and Affected Versions HP Command View Advanced Edition CVAE versions prior to 8.6.1-02 DevMgr versions 7.0.0-00 through 8.6.1-02 RepMgr versions affected when installed on the same machine as DevMgr TSMgr versions affected when installed on the same machine as DevM...

Cisco ACE 4710 Device Manager GUI Remote Command Injection Vulnerability (cisco-sa-20160224-ace)

The Cisco Application Control Engine ACE software installed on the remote Cisco ACE 4710 device is an A5 version prior to A53.0. It is, therefore, affected by a remote command injection vulnerability in the device manager GUI due to improper validation of user-supplied input in HTTP POST requests...

PT-2016-4690

Name of the Vulnerable Software and Affected Versions Cisco Application Control Engine ACE 4710 A5 versions prior to A53.1 Description The issue allows remote authenticated users to bypass intended Role-Based Access Control RBAC restrictions. This is achieved by executing arbitrary Command-Line...

CVE-2016-1297: Improper Neutralization of Special Elements used in an OS Command

The Device Manager GUI in Cisco Application Control Engine ACE 4710 A5 before A53.1 allows remote authenticated users to bypass intended RBAC restrictions and execute arbitrary CLI commands with admin privileges via an unspecified parameter in a POST request, aka Bug ID CSCul84801...