Vulnerability in HP Icewall Federation Agent
CVE-2013-4820
Unspecified vulnerability in HP IceWall SSO 8.0 through 10.0, IceWall SSO Agent Option 8.0 through 10.0, IceWall SSO Smart Device Option 10.0, IceWall SSO SAML2 Agent Option 8.0, IceWall SSO JAVA Agent Library 8.0 through 10.0, IceWall Federation Agent 3.0, and IceWall File Manager 3.0 through SP4 allows remote authenticated users to obtain sensitive information via unknown vectors.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 2.1 (Low). Vector: AV:N/AC:H/Au:S/C:P/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.015 (73.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 73rd percentile — 73.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.015 · newest: 0.015 · change: 0.000
Affected products
- HP Icewall Federation Agent — versions 8.0
- HP Icewall File Manager — versions 3.0
- HP Icewall Java Agent Library — versions 8.0, 10.0
- HP Icewall Smart Device Option — versions 10.0
- HP Icewall Sso Agent — versions 8.0, 8.0.1, 10.0
- HP Icewall Sso Agent Option — versions 8.0, 10.0
- HP Icewall Sso Saml2 Option — versions 8.0
References
- support.hpe.com/hpsc/doc/public/display
- h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay (Vendor Advisory, vendor-advisory)