Privilege Escalation and Code Execution Flaws in HP Security Manager
CVE-2022-46359

8.8HIGH

Key Information:

Vendor
HP
Vendor
CVE Published:
27 January 2023

Summary

HP Security Manager contains vulnerabilities that could lead to privilege escalation, allowing attackers to gain higher permissions than intended. Additionally, these flaws may enable arbitrary code execution, potentially allowing malicious actors to execute harmful code within the system. The vulnerabilities also raise concerns over information disclosure, posing risks to sensitive data containment. Ensure that your systems are updated to mitigate these risks as detailed in HP's security documentation.

Affected Version(s)

HP Security Manager See HP Security Bulletin reference for affected versions.

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.