CVE-2016-4382

HIGH

HPE Performance Center - Auth Bypass

Title source: llm
STIX 2.1

Description

HPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to a "remote user validation failure" issue.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1036770
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/92915

Scores

CVSS v3 8.3
EPSS 0.0022
EPSS Percentile 44.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Details

CWE
CWE-264
Status published
Products (5)
hp/performance_center 11.52
hp/performance_center 12.00
hp/performance_center 12.01
hp/performance_center 12.20
hp/performance_center 12.50
Published Sep 21, 2016
Tracked Since Feb 18, 2026