Privilege Escalation and Code Execution Flaws in HP Security Manager
CVE-2022-46359
8.8HIGH
Summary
HP Security Manager contains vulnerabilities that could lead to privilege escalation, allowing attackers to gain higher permissions than intended. Additionally, these flaws may enable arbitrary code execution, potentially allowing malicious actors to execute harmful code within the system. The vulnerabilities also raise concerns over information disclosure, posing risks to sensitive data containment. Ensure that your systems are updated to mitigate these risks as detailed in HP's security documentation.
Affected Version(s)
HP Security Manager See HP Security Bulletin reference for affected versions.
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved