Privilege Escalation and Code Execution in HP Security Manager

CVE-2022-46358

Summary

HP Security Manager has been identified with vulnerabilities that may allow for privilege escalation, enabling attackers to gain unauthorized access. Furthermore, it poses risks of arbitrary code execution, where malicious actors can execute untrusted code in a vulnerable system. There are also concerns regarding potential information disclosure, which can lead to sensitive data being exposed. Organizations utilizing HP Security Manager should consider applying the necessary security updates to mitigate these risks.

References