CVE-2016-2016

Published: May 14, 2016Modified: May 6, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Base-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base-VxFS-51 B.05.10.00 through B.05.10.02 on HPE HP-UX 11iv3 with VxFS 5.0, VxFS 5.0.1, and VxFS 5.1SP1 mishandles ACL inheritance for default:class: entries, default:other: entries, and default:user: entries, which allows local users to bypass intended access restrictions by leveraging the configuration of a parent directory.

Affected (7)

Products: Hp: Base Vxfs 50, Base Vxfs 501, Base Vxfs 51

3 products

Base Vxfs 50

Base Vxfs 501

Base Vxfs 51

Configuration A

7 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Base Vxfs 50	Version b.05.00.01
Hp Base Vxfs 50	Version b.05.00.02
Hp Base Vxfs 501	Version b.05.01.01
Hp Base Vxfs 501	Version b.05.01.03
Hp Base Vxfs 501	Version b.05.01.0
Hp Base Vxfs 51	Version b.05.10.00
Hp Base Vxfs 51	Version b.05.10.02