CVE-2015-5440

Published: Sep 16, 2015Modified: May 6, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

HP UCMDB 10.00 and 10.01 before 10.01CUP12, 10.10 and 10.11 before 10.11CUP6, and 10.2x before 10.21 allows local users to obtain sensitive information via unspecified vectors.

Affected (5)

Products: Hp: Universal Configuration Management Database

1 product

Universal Configuration Management Database

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Hp Universal Configuration Management Database	Version 10.00
Hp Universal Configuration Management Database	Version 10.01
Hp Universal Configuration Management Database	Version 10.10
Hp Universal Configuration Management Database	Version 10.11
Hp Universal Configuration Management Database	Version 10.21

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://www.securitytracker.com/id/1033528

Source: hp-security-alert@hp.com

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04790231

Source: hp-security-alert@hp.com

Vendor Advisory

http://www.securitytracker.com/id/1033528

Source: af854a3a-2127-422b-91ae-364da2661108

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04790231

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.