NVD

Id
18317  
Name
CVE-2016-2004  
Description
HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2623.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-04-21  
Modified Date
2016-12-02  
Seq
2016-2004  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
101431 18317 CVE-2016-2004 http://packetstormsecurity.com/files/137199/HP-Data-Protector-A.09.00-Command-Execution.html  View
101432 18317 CVE-2016-2004 http://packetstormsecurity.com/files/137341/HP-Data-Protector-Encrypted-Communication-Remote-Command-Execution.html  View
101433 18317 CVE-2016-2004 VU#267328  View
101434 18317 CVE-2016-2004 1035631  View
101435 18317 CVE-2016-2004 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05085988  View
101436 18317 CVE-2016-2004 39858  View
101437 18317 CVE-2016-2004 39874  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1562 JVNDB-2016-002335 HPE Data Protector における任意のコードを実行される脆弱性 HPE Data Protector には、認証の欠如 (lack of authentication) に関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2016-2004 88510 CVE-2016-2004 18317 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002335.html 2016-04-18 2016-07-01 View