7.5
CVE-2015-2117
- EPSS 10.15%
- Published 27.04.2015 12:59:05
- Last modified 12.04.2025 10:46:40
- Source hp-security-alert@hp.com
- Teams watchlist Login
- Open Login
HP TippingPoint Security Management System (SMS) and TippingPoint Virtual Security Management System (vSMS) before 4.1 patch 3 and 4.2 before patch 1 do not require authentication for JBoss RMI requests, which allows remote attackers to execute arbitrary code by (1) uploading this code within an archive or (2) instantiating a class.
Data is provided by the National Vulnerability Database (NVD)
Hp ≫ Tippingpoint Security Management System Version <= 4.2
Hp ≫ Tippingpoint Virtual Security Management System Version <= 4.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 10.15% | 0.928 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.