Remote Information Disclosure in HPE Systems Insight Manager
CVE-2016-2019
8.1HIGH
Summary
HPE Systems Insight Manager prior to version 7.5.1 contains vulnerabilities that may allow remote authenticated users to exploit improper access controls, potentially leading to unauthorized information disclosure and the ability to modify sensitive data. The specifics of the vulnerability exploit involve undefined vectors, allowing malicious actors to act without detection.
References
CVSS V3.1
Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved