HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Asset_manager | Hp | 9.40 (including) | 9.40 (including) |
| Asset_manager | Hp | 9.41 (including) | 9.41 (including) |
| Asset_manager | Hp | 9.50 (including) | 9.50 (including) |
| Asset_manager_cloudsystem_chargeback | Hp | 9.40 (including) | 9.40 (including) |