CVE-2016-2001

Опубликовано: 12 апр. 2016

Источник: nvd

CVSS3: 7.4

CVSS2: 5.8

EPSS Низкий

Описание

HPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to obtain sensitive information or conduct URL redirection attacks via unspecified vectors.

Комментарий

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Ссылки

http://www.securitytracker.com/id/1035505
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073504
Patch
Vendor Advisory
http://www.securitytracker.com/id/1035505
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073504
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hp:universal_cmbd_foundation:10.0:*:*:*:*:*:*:*

cpe:2.3:a:hp:universal_cmbd_foundation:10.01:*:*:*:*:*:*:*

cpe:2.3:a:hp:universal_cmbd_foundation:10.10:*:*:*:*:*:*:*

cpe:2.3:a:hp:universal_cmbd_foundation:10.11:*:*:*:*:*:*:*

cpe:2.3:a:hp:universal_cmbd_foundation:10.20:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00497

Низкий

7.4 High

CVSS3

5.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9647-2gr2-w2rp