CVE-2015-2802

Katalog CVE

CVSS 7.5 · High EPSS 6,4%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada hp asset manager, hp asset manager cloudsystem chargeback +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem Chargeback 9.40, which could let a remote malicious user obtain sensitive information. This is the TLS vulnerability known as the RC4 cipher Bar Mitzvah vulnerability.

Rincian

Terbit di NVD

4 Februari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

6,4% peluang dieksploitasi; lebih tinggi dari 93,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://marc.info/?l=bugtraq&m=143455780010289&w=2 mailing list · advisory pihak ketiga
• http://marc.info/?l=bugtraq&m=143629738517220&w=2 mailing list · advisory pihak ketiga
• http://www.securityfocus.com/bid/75258 advisory pihak ketiga · vdb entry
• https://packetstormsecurity.com/files/cve/CVE-2015-2802 advisory pihak ketiga · vdb entry
• https://securitytracker.com/id/1032599 advisory pihak ketiga · vdb entry