CVE-2016-4382 Information

Description

HPE Performance Center 11.52 12.00 12.01 12.20 and 12.50 allows remote attackers to bypass intended access restrictions via unspecified vectors related to a \remote user validation failure\ issue.

CVSS Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Reference

http://www.securityfocus.com/bid/92915 http://www.securitytracker.com/id/1036770 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05269356

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

CHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.3