Information Disclosure in HP ThinPro by HP Inc.
CVE-2019-16285
4.6MEDIUM
Summary
An information disclosure vulnerability exists in HP ThinPro that allows an unauthenticated attacker with physical access to the device to extract sensitive data onto a local drive. This vulnerability can potentially compromise user privacy and system integrity, emphasizing the necessity for physical security measures and proper access control mechanisms.
Affected Version(s)
ThinPro Linux 6.2
ThinPro Linux 6.2.1
ThinPro Linux 7.0
References
CVSS V3.1
Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved