CVE Vulnerabilities

CVE-2016-2012

Improper Authentication

Published: May 07, 2016 | Modified: Dec 01, 2016
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to bypass authentication via unspecified vectors.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Network_node_manager_i Hp 9.20 (including) 9.20 (including)
Network_node_manager_i Hp 9.23 (including) 9.23 (including)
Network_node_manager_i Hp 9.24 (including) 9.24 (including)
Network_node_manager_i Hp 9.25 (including) 9.25 (including)
Network_node_manager_i Hp 10.00 (including) 10.00 (including)
Network_node_manager_i Hp 10.01 (including) 10.01 (including)

Potential Mitigations

References