CVE-2015-2802

Description

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem Chargeback 9.40, which could let a remote malicious user obtain sensitive information. This is the TLS vulnerability known as the RC4 cipher Bar Mitzvah vulnerability.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

3.881

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2015-2802 ,CVE-2016-2000 are affected in asset_manager 9.50	NCM
Vulnerabilities CVE-2015-2802 ,CVE-2016-2000 are affected in asset_manager_cloudsystem_chargeback 9.40	NCM
Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2802)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234