Privilege Escalation and Code Execution Vulnerabilities in HP Security Manager
CVE-2022-46356

8.8HIGH

Key Information:

Vendor
HP
Status
HP Security Manager
Vendor
CVE Published:
30 January 2023

Summary

Potential vulnerabilities in HP Security Manager may expose users to risks including the escalation of privileges, arbitrary code execution, and unauthorized information disclosure. Attackers could exploit these vulnerabilities to gain elevated access, execute malicious code, or retrieve sensitive data, posing significant security concerns for organizations relying on this product for their cybersecurity management.

Affected Version(s)

HP Security Manager See HP Security Bulletin reference for affected versions.

References

https://support.hp.com/us-en/document/ish_7334353-7334378-16

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.