CVE-2016-4388 - The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code

CVE-2016-4388

Summary

The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4389, and CVE-2016-4390.

References

Vulnerable Configurations

cpe:2.3:a:hp:keyview:10.18.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:keyview:10.18.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:keyview:10.19.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:keyview:10.19.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:keyview:10.20.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:keyview:10.20.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:keyview:10.21.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:keyview:10.21.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:keyview:10.22.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:keyview:10.22.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:keyview:10.23.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:keyview:10.23.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:keyview:10.24.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:keyview:10.24.0.0:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 30-07-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

bid	93424
confirm	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05297477
sectrack	1036935

Last major update

30-07-2017 - 01:29

Published

05-10-2016 - 10:59

Last modified

30-07-2017 - 01:29