Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-7836 State: PUBLISHED Published: 2015-10-28T10:00:00 Last Updated: 2024-08-06T07:59:00.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for VLAN data within the padding section of an Ethernet frame. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-921524.pdf - http://www.securitytracker.com/id/1033973 - https://ics-cert.us-cert.gov/advisories/ICSA-15-300-01
CVE ID: CVE-2015-7837 State: PUBLISHED Published: 2017-09-19T16:00:00 Last Updated: 2024-08-06T07:58:59.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mjg59/linux/commit/4b2b64d5a6ebc84214755ebccd599baef7c1b798 - https://bugzilla.redhat.com/show_bug.cgi?id=1272472 - http://rhn.redhat.com/errata/RHSA-2015-2152.html
599baef7c1b798 - https://bugzilla.redhat.com/show_bug.cgi?id=1272472 - http://rhn.redhat.com/errata/RHSA-2015-2152.html - http://www.securityfocus.com/bid/77097 - http://www.openwall.com/lists/oss-security/2015/10/15/6 - http://rhn.redhat.com/errata/RHSA-2015-2411.html
CVE ID: CVE-2015-7838 State: PUBLISHED Published: 2015-10-15T20:00:00Z Last Updated: 2024-09-16T18:39:55.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProcessFileUpload.jsp in SolarWinds Storage Manager before 6.2 allows remote attackers to upload and execute arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-460 - http://www.solarwinds.com/documentation/srm/docs/releasenotes/releasenotes.htm
CVE ID: CVE-2015-7839 State: PUBLISHED Published: 2015-10-15T20:00:00Z Last Updated: 2024-09-16T23:35:49.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-461
CVE ID: CVE-2015-7840 State: PUBLISHED Published: 2015-10-15T20:00:00 Last Updated: 2024-08-06T07:59:00.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201603-11 - http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm
CVE ID: CVE-2015-7841 State: PUBLISHED Published: 2017-10-02T18:00:00 Last Updated: 2024-08-06T07:58:59.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 with software before V100R002C00SPC502, RH8100 V3 with software before V100R003C00SPC110, CH222 V3 with software before V100R001C00SPC161, CH220 V3 with software before V100R001C00SPC161, and CH121 V3 with
110, CH222 V3 with software before V100R001C00SPC161, CH220 V3 with software before V100R001C00SPC161, and CH121 V3 with software before V100R001C00SPC161 allows remote attackers to bypass access restrictions and enter commands via unspecified parameters, as demonstrated by a "user creation command." Additional Analyst Notes: - CVE Program Container: References: - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454418.htm - http://www.securityfocus.com/bid/76836
CVE ID: CVE-2015-7842 State: PUBLISHED Published: 2017-10-09T14:00:00 Last Updated: 2024-08-06T07:58:59.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 with software before V100R002C00SPC502, RH8100 V3 with software before V100R003C00SPC110, CH222 V3 with software before V100R001C00SPC161, CH220 V3 with software before V100R001C00SPC161, and CH121 V3 with software before V100R001C00SPC1
re V100R001C00SPC161, CH220 V3 with software before V100R001C00SPC161, and CH121 V3 with software before V100R001C00SPC161 allow remote authenticated operators to change server information by leveraging failure to verify user permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454418.htm - http://www.securityfocus.com/bid/76836
CVE ID: CVE-2015-7843 State: PUBLISHED Published: 2017-10-02T18:00:00 Last Updated: 2024-08-06T07:59:00.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management interface on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R003C00SPC503, XH628 V3 with software before V100R003C00SPC602, RH1288 V3 with software before V100R003C00SPC602, RH2288A V2 with software before V100R002C00SPC701, RH1288A V2 with software before V100R002C00SPC502, RH8100 V3 with software before V100R003C00SPC110, CH222 V3 with software before V100R001C00SPC161, CH220 V3 with software before V100R001C00SPC161, and CH121 V3 with sof
CH222 V3 with software before V100R001C00SPC161, CH220 V3 with software before V100R001C00SPC161, and CH121 V3 with software before V100R001C00SPC161 does not limit the number of query attempts, which allows remote authenticated users to obtain credentials of higher-level users via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454418.htm - http://www.securityfocus.com/bid/76836
CVE ID: CVE-2015-7844 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T07:59:00.382Z Vendors: n/a Products: FusionAccess V100R005C10,V100R005C20 Problem Types: Insufficient Input Verification Description: Huawei FusionAccess with software V100R005C10,V100R005C20 could allow attackers to craft and send a malformed HDP protocol packet to cause the virtual cloud desktop to be displaying an error and not usable. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-453537
CVE ID: CVE-2015-7845 State: PUBLISHED Published: 2015-11-19T20:00:00 Last Updated: 2024-08-06T07:59:00.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service (CLI outage) via crafted SSH packets. Additional Analyst Notes: - CVE Program Container: References: - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453512.htm
CVE ID: CVE-2015-7846 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T07:59:00.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physical access to the CF card to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-446634.htm - http://www.securityfocus.com/bid/76173
CVE ID: CVE-2015-7847 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T07:59:00.583Z Vendors: n/a Products: E3272s Versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00 Problem Types: DOS Description: Huawei MBB (Mobile Broadband) product E3272s with software versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00 has a Denial of Service (DoS) vulnerability. An attacker could send a malicious packet to the Common Gateway Interface (CGI) of a target device and make it fail while setting the port attribute, which causes a DoS attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-450877
CVE ID: CVE-2015-7848 State: PUBLISHED Published: 2017-01-06T21:00:00 Last Updated: 2024-08-06T07:59:00.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a specially crafted private mode packet. The crafted packet needs to have the correct message authentication code and a valid timestamp. When processed by the NTP daemon, it leads to an immediate crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/77275 - http://www.securitytracker.com/id/1033951 - http://www.talosintelligence.com/reports/TALOS-2015-0052/ - https
id/77275 - http://www.securitytracker.com/id/1033951 - http://www.talosintelligence.com/reports/TALOS-2015-0052/ - https://security.gentoo.org/glsa/201607-15 - https://security.netapp.com/advisory/ntap-20171004-0001/
CVE ID: CVE-2015-7849 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T07:59:00.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1274257 - http://support.ntp.org/bin/view/Main/NtpBug2916 - http://www.securitytracker.com/id/1033951 - http://www.securityfocus.com/bid/77276 - https://security.gentoo.org/glsa/201607-15 - https://security
.com/id/1033951 - http://www.securityfocus.com/bid/77276 - https://security.gentoo.org/glsa/201607-15 - https://security.netapp.com/advisory/ntap-20171004-0001/
CVE ID: CVE-2015-7850 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T07:59:00.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033951 - http://www.debian.org/security/2015/dsa-3388 - http://support.ntp.org/bin/view/Main/NtpBug2917 - https://bugzilla.redhat.com/show_bug.cgi?id=1274258 - http://www.securityfocus.com/bid/77279 - https://security.gentoo.org/glsa/201607-15
edhat.com/show_bug.cgi?id=1274258 - http://www.securityfocus.com/bid/77279 - https://security.gentoo.org/glsa/201607-15 - https://security.netapp.com/advisory/ntap-20171004-0001/
CVE ID: CVE-2015-7851 State: PUBLISHED Published: 2020-01-28T16:35:21 Last Updated: 2024-08-06T07:59:00.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP before 4.2.8p4, when used on systems that do not use '\' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.talosintel.com/reports/TALOS-2015-0062/ - http://support.ntp.org/bin/view/Main/SecurityNotice - http://support.ntp.org/bin/view/Main/NtpBug2918
CVE ID: CVE-2015-7852 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T07:59:00.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 response packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - http://support.ntp.org/bin/view/Main/NtpBug2919 - http://www.securityfocus.com/bid/77288 - http://rhn.redhat.com/errata/RHSA-2016-2583.html - http://www.securitytracker.com/id/1033951 - http://rhn.redhat.com/errata/RHSA-2016-
hat.com/errata/RHSA-2016-2583.html - http://www.securitytracker.com/id/1033951 - http://rhn.redhat.com/errata/RHSA-2016-0780.html - http://www.debian.org/security/2015/dsa-3388 - https://security.gentoo.org/glsa/201607-15 - https://security.netapp.com/advisory/ntap-20171004-0001/
CVE ID: CVE-2015-7853 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T07:59:00.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative input value. Additional Analyst Notes: - CVE Program Container: References: - http://support.ntp.org/bin/view/Main/NtpBug2920 - http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html - http://www.ubuntu.com/usn/USN-2783-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - http://www.
www.ubuntu.com/usn/USN-2783-1 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00020.html - http://www.securitytracker.com/id/1033951 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00048.html - https://bugzilla.redhat.com/show_bug.cgi?id=1274262 - http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html - http://www.securityfocus.com/bid/77273 - http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html - https://security.gentoo.org/glsa/201607-15 - https://security.netapp.com/advisory/ntap-20171004-0001/ - http://packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html - http://packetstormsecurity.com/files
packetstormsecurity.com/files/134137/Slackware-Security-Advisory-ntp-Updates.html - http://packetstormsecurity.com/files/134082/FreeBSD-Security-Advisory-ntp-Authentication-Bypass.html - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-ntp - https://bto.bluecoat.com/security-advisory/sa103 - http://www.securityfocus.com/archive/1/536833/100/0/threaded - http://www.talosintel.com/vulnerability-reports/ - http://lists.opensuse.org/opensuse-updates/2015-11/msg00093.html - http://www.securityfocus.com/archive/1/archive/1/536833/100/100/threaded - http://www.securityfocus.com/archive/1/536760/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/5
aded - http://www.securityfocus.com/archive/1/536760/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/536760/100/100/threaded - http://www.securityfocus.com/archive/1/536796/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/536796/100/100/threaded - http://www.securityfocus.com/archive/1/536737/100/0/threaded - http://www.securityfocus.com/archive/1/archive/1/536737/100/100/threaded - https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11
CVE ID: CVE-2015-7854 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T08:06:30.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted key file. Additional Analyst Notes: - CVE Program Container: References: - http://support.ntp.org/bin/view/Main/NtpBug2921 - https://bugzilla.redhat.com/show_bug.cgi?id=1274263 - http://www.securitytracker.com/id/1033951 - http://www.securityfocus.com/bid/77277 - https://security.gentoo.org/gls
3 - http://www.securitytracker.com/id/1033951 - http://www.securityfocus.com/bid/77277 - https://security.gentoo.org/glsa/201607-15 - https://security.netapp.com/advisory/ntap-20171004-0001/
CVE ID: CVE-2015-7855 State: PUBLISHED Published: 2017-08-07T20:00:00 Last Updated: 2024-08-06T08:06:29.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/40840/ - http://www.securityfocus.com/bid/77283 - http://www.securitytracker.com/id/1033951 - http://www.debian.org/security/2015/dsa-3388 - https://bugzilla.redhat.com/show_bug.cgi?id=1274264 - https://h20566.www2.h
tp://www.debian.org/security/2015/dsa-3388 - https://bugzilla.redhat.com/show_bug.cgi?id=1274264 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05270839 - http://support.ntp.org/bin/view/Main/NtpBug2922 - https://security.gentoo.org/glsa/201607-15 - https://security.netapp.com/advisory/ntap-20171004-0001/ - https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11
CVE ID: CVE-2015-7856 State: PUBLISHED Published: 2015-10-16T20:00:00Z Last Updated: 2024-09-17T03:42:49.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.opennms.org/wiki/CVE-2015-0975 - http://www.rapid7.com/db/modules/auxiliary/gather/opennms_xxe
CVE ID: CVE-2015-7857 State: PUBLISHED Published: 2015-10-29T20:00:00 Last Updated: 2024-08-06T08:06:30.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php in Joomla! 3.2 before 3.4.5 allows remote attackers to execute arbitrary SQL commands via the list[select] parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/ - http://www.securityfocus.com/bid/77295 - http://www.securitytracker.com/id/10
t-Results-in-Full-Administrative-Access/ - http://www.securityfocus.com/bid/77295 - http://www.securitytracker.com/id/1033950 - http://www.rapid7.com/db/modules/exploit/unix/webapp/joomla_contenthistory_sqli_rce - https://www.exploit-db.com/exploits/38797/ - http://packetstormsecurity.com/files/134494/Joomla-Content-History-SQL-Injection-Remote-Code-Execution.html - http://packetstormsecurity.com/files/134097/Joomla-3.44-SQL-Injection.html - http://developer.joomla.org/security-centre/628-20151001-core-sql-injection.html
CVE ID: CVE-2015-7858 State: PUBLISHED Published: 2015-10-29T20:00:00 Last Updated: 2024-08-06T08:06:30.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7297. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/ - http://www.securityfocus.com/bid/77295 - http://www.securitytracker.com/id/1033950 - http://www.rapid7.com/db/modules/exploit/unix/webapp/joomla_c
om/bid/77295 - http://www.securitytracker.com/id/1033950 - http://www.rapid7.com/db/modules/exploit/unix/webapp/joomla_contenthistory_sqli_rce - https://www.exploit-db.com/exploits/38797/ - http://packetstormsecurity.com/files/134494/Joomla-Content-History-SQL-Injection-Remote-Code-Execution.html - http://packetstormsecurity.com/files/134097/Joomla-3.44-SQL-Injection.html - http://developer.joomla.org/security-centre/628-20151001-core-sql-injection.html
CVE ID: CVE-2015-7859 State: PUBLISHED Published: 2015-10-29T20:00:00 Last Updated: 2024-08-06T08:06:29.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: The com_contenthistory component in Joomla! 3.2 before 3.4.5 does not properly check ACLs, which allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033950 - http://developer.joomla.org/security-centre/629-20151002-core-acl-violations.html
CVE ID: CVE-2015-7860 State: PUBLISHED Published: 2015-10-19T18:00:00 Last Updated: 2024-08-06T08:06:30.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the agent in Persistent Accelerite Radia Client Automation (formerly HP Client Automation), possibly before 9.1, allows remote attackers to execute arbitrary code by sending a large amount of data in an environment that lacks relationship-based firewalling. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/966927 - http://www.securityfocus.com/bid/75966 - http://www.securitytracker.com/id/1033861 - http://zerodayinitiative.com/advisories/ZDI-15-363/
CVE ID: CVE-2015-7861 State: PUBLISHED Published: 2015-10-19T18:00:00 Last Updated: 2024-08-06T08:06:30.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent Accelerite Radia Client Automation (formerly HP Client Automation), possibly before 9.1, allows remote attackers to execute arbitrary code by sending unspecified commands in an environment that lacks relationship-based firewalling. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/966927 - http://zerodayinitiative.com/advisories/ZDI-15-364/ - http://www.securityfocus.com/bid/75966 - http://www.securitytracker.com/id/1033861
CVE ID: CVE-2015-7862 State: PUBLISHED Published: 2015-10-19T18:00:00 Last Updated: 2024-08-06T08:06:29.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 improperly implements the Role Based Access Control feature, which might allow remote attackers to modify an account's role assignments via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033862 - https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remot
/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features
CVE ID: CVE-2015-7863 State: PUBLISHED Published: 2015-10-19T18:00:00 Last Updated: 2024-08-06T08:06:30.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 enables a remote Notify capability without the Extended Notify Security features, which might allow remote attackers to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033862 - https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-pra