CVE Vulnerabilities

CVE-2019-16287

Published: Nov 22, 2019 | Modified: Aug 24, 2020
CVSS 3.x
6.8
MEDIUM
Source:
NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

In HP ThinPro Linux 6.2, 6.2.1, 7.0 and 7.1, an attacker may be able to leverage the application filter bypass vulnerability to gain privileged access to create a file on the local file system whose presence puts the device in Administrative Mode, which will allow the attacker to executed commands with elevated privileges.

Affected Software

Name Vendor Start Version End Version
Thinpro Hp 6.2 (including) 6.2 (including)
Thinpro Hp 6.2.1 (including) 6.2.1 (including)
Thinpro Hp 7.0 (including) 7.0 (including)
Thinpro Hp 7.1 (including) 7.1 (including)

References