Sensitive Information Disclosure in HPE System Management Homepage

CVE-2016-4394

Summary

The HPE System Management Homepage, prior to version 7.6, is susceptible to remote attacks that allow unauthorized users to access sensitive information through unspecified vectors. This issue relates to inadequate implementation of HTTP Strict Transport Security (HSTS), which may expose critical data to potential threat actors.

References