CVE-2016-4368
Published Jun 8, 2016
Last updated 8 years ago
Overview
- Description
- HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-20
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CC3120E-4D93-48EA-B9BF-52F6977F471D"
},
{
"criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA100E6A-DA01-4218-877C-8BC9BBDB6492"
},
{
"criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BB1F1CD-D4AC-413E-86CE-B9184E598383"
},
{
"criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B771DD1-6E58-4B87-97A3-6AE14C12B934"
},
{
"criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BE51B2D-7DF1-4508-B5A3-032E20A46188"
},
{
"criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64D56642-E7F5-4BE6-961F-4BBAE8A88E14"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0CFBF73-570C-44DF-8D72-C56B2DEFAB3B"
},
{
"criteria": "cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F1933BF-A0CB-4829-920D-0CC064749726"
},
{
"criteria": "cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77916DDD-6005-4E8F-A3CC-C7581EEB37F4"
},
{
"criteria": "cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBE8791E-1397-48B0-BDD6-E085AD43C8B7"
},
{
"criteria": "cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACCC4C6A-7D9B-4664-89AD-48FFE3517335"
},
{
"criteria": "cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAC95092-E0A9-4269-88C0-258EB0C5BFAE"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hp:universal_discovery:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C0FC8DA-FB4E-45A5-A340-E9C5962BC920"
},
{
"criteria": "cpe:2.3:a:hp:universal_discovery:10.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1BDE22A-E753-4807-936C-A8545B3849D0"
},
{
"criteria": "cpe:2.3:a:hp:universal_discovery:10.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DF1C0E2-BA76-4206-9E8F-6ECCBAE5329E"
},
{
"criteria": "cpe:2.3:a:hp:universal_discovery:10.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C6623FD-2113-4966-B72F-46A7E7B4ABDF"
},
{
"criteria": "cpe:2.3:a:hp:universal_discovery:10.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "074205F5-1AE3-47E3-9E86-454625AE0FEB"
},
{
"criteria": "cpe:2.3:a:hp:universal_discovery:10.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF19B5E6-B2E0-4C56-B1A0-0144A8C95BFB"
}
],
"operator": "OR"
}
]
}
]