Vulnerability in Hp Xp7_command_view

CVE-2016-4381

HPE XP7 Command View Advanced Edition (CVAE) Suite 6.x through 8.x before 8.4.1-02, when Replication Manager (RepMgr) and Device Manager (DevMgr) are enabled, allows local users to bypass intended access restrictions via unspecified vector…

EPSS: 0.001 (20.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.5 (Medium). Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
  • 92733 (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2016-4381?
CVE-2016-4381 is a medium-severity vulnerability in Hp Xp7_command_view, classified under CWE-264. CVSS score: 4.5/10. Published 2016-09-08.
How severe is CVE-2016-4381?
Medium severity. CVSS v3 base score is 4.5 out of 10.