CVE-2015-2802

{"id": "CVE-2015-2802", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2020-02-04T21:15:10.417", "references": [{"url": "http://marc.info/?l=bugtraq&m=143455780010289&w=2", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=143629738517220&w=2", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/75258", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://packetstormsecurity.com/files/cve/CVE-2015-2802", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://securitytracker.com/id/1032599", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=143455780010289&w=2", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://marc.info/?l=bugtraq&m=143629738517220&w=2", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/75258", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://packetstormsecurity.com/files/cve/CVE-2015-2802", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://securitytracker.com/id/1032599", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem Chargeback 9.40, which could let a remote malicious user obtain sensitive information. This is the TLS vulnerability known as the RC4 cipher Bar Mitzvah vulnerability."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n en HP SiteScope versiones 11.2 y 11.3 en Windows, Linux y Solaris, HP Asset Manager versiones 9.30 hasta 9.32, 9.40 hasta 9.41, 9.50 y Asset Manager Cloudsystem Chargeback versi\u00f3n 9.40, lo que podr\u00eda permitir a un usuario malicioso remoto obtener informaci\u00f3n confidencial. Esta es la vulnerabilidad TLS, se conoce como la vulnerabilidad RC4 Cipher Bar Mitzvah."}], "lastModified": "2024-11-21T02:28:06.247", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:asset_manager:9.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03DCFCC8-D903-4A87-9E6B-419DF734B769"}, {"criteria": "cpe:2.3:a:hp:asset_manager:9.31:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F41E1FFB-C08C-4ADD-A811-EB4A1EC8FEFE"}, {"criteria": "cpe:2.3:a:hp:asset_manager:9.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E7349D2-18E4-4CC4-B578-F7255CD1D8FA"}, {"criteria": "cpe:2.3:a:hp:asset_manager:9.40:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B483D9EA-268E-4F3F-8145-9C99DBDA7DFD"}, {"criteria": "cpe:2.3:a:hp:asset_manager:9.41:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5B626C1-6560-414C-AEB9-DA755A75DE02"}, {"criteria": "cpe:2.3:a:hp:asset_manager:9.50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2B3424E-BF0C-48A4-8D34-07FB299BB85E"}, {"criteria": "cpe:2.3:a:hp:asset_manager_cloudsystem_chargeback:9.40:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C2E1D19-CEEF-4742-B1A2-7504A920FE4D"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:sitescope:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB6FB70C-88E0-4C1B-BC2A-126135067B81", "versionEndIncluding": "11.24", "versionStartIncluding": "11.20"}, {"criteria": "cpe:2.3:a:hp:sitescope:11.30:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F02A47A-24BB-42CA-AC9C-D3A7B2FECEA3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}, {"criteria": "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "91F372EA-3A78-4703-A457-751B2C98D796"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}