← Back

CVE-2015-2802

nvd nist
Published: Feb 4, 2020Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem Chargeback 9.40, which could let a remote malicious user obtain sensitive information. This is the TLS vulnerability known as the RC4 cipher Bar Mitzvah vulnerability.

Affected (9)

Hp
3 products
Asset Manager
Asset Manager Cloudsystem Chargeback
Sitescope
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Hp
Asset Manager
Version 9.30
Asset Manager
Version 9.31
Asset Manager
Version 9.32
Asset Manager
Version 9.40
Asset Manager
Version 9.41
Asset Manager
Version 9.50
Asset Manager Cloudsystem Chargeback
Version 9.40
Configuration B
2 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Hp
Sitescope
From 11.20 to 11.24
Sitescope
Version 11.30
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions
Oracle
Solaris
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.