CVE-2019-16286

Published: Nov 22, 2019Modified: Nov 21, 2024

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

An attacker may be able to bypass the OS application filter meant to restrict applications that can be executed by changing browser preferences to launch a separate process that in turn can execute arbitrary commands.

Affected (4)

Products: Hp: Thinpro Linux

1 product

Thinpro Linux

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Hp Thinpro Linux	Version 6.2.1
Hp Thinpro Linux	Version 6.2
Hp Thinpro Linux	Version 7.0
Hp Thinpro Linux	Version 7.1

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (6)

http://packetstormsecurity.com/files/156898/HP-ThinPro-6.x-7.x-Filter-Bypass.html

Source: hp-security-alert@hp.com

http://seclists.org/fulldisclosure/2020/Mar/37

Source: hp-security-alert@hp.com

https://support.hp.com/us-en/document/c06509350

Source: hp-security-alert@hp.com

Vendor Advisory

http://packetstormsecurity.com/files/156898/HP-ThinPro-6.x-7.x-Filter-Bypass.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://seclists.org/fulldisclosure/2020/Mar/37

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.hp.com/us-en/document/c06509350

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.