A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and Software Download Tool) which may lead to information disclosure. HP is releasing mitigation for the potential vulnerability.
References
| Link | Resource |
|---|---|
| https://support.hp.com/us-en/document/ish_9440593-9440618-16 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
19 Oct 2023, 20:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://support.hp.com/us-en/document/ish_9440593-9440618-16 - Patch, Vendor Advisory | |
| First Time |
Hp mt31
Hp thinupdate Hp mt43 Hp t530 Hp Hp mt46 Hp elite Mt645 Hp t540 Hp mt21 Hp t638 Hp t628 Hp mt45 Hp pro Mt440 G3 Hp mt22 Hp t730 Hp mt32 Hp mt44 Hp t430 Hp t630 Hp t640 Hp t740 |
|
| CPE | cpe:2.3:h:hp:t740:-:*:*:*:*:*:*:* cpe:2.3:h:hp:mt22:-:*:*:*:*:*:*:* cpe:2.3:h:hp:t540:-:*:*:*:*:*:*:* cpe:2.3:h:hp:mt21:-:*:*:*:*:*:*:* cpe:2.3:h:hp:t430:-:*:*:*:*:*:*:* cpe:2.3:h:hp:t630:-:*:*:*:*:*:*:* cpe:2.3:h:hp:t638:-:*:*:*:*:*:*:* cpe:2.3:h:hp:elite_mt645:-:*:*:*:*:*:*:* cpe:2.3:h:hp:pro_mt440_g3:-:*:*:*:*:*:*:* cpe:2.3:h:hp:mt32:-:*:*:*:*:*:*:* cpe:2.3:h:hp:mt44:-:*:*:*:*:*:*:* cpe:2.3:h:hp:mt43:-:*:*:*:*:*:*:* cpe:2.3:h:hp:t628:-:*:*:*:*:*:*:* cpe:2.3:h:hp:mt31:-:*:*:*:*:*:*:* cpe:2.3:h:hp:mt46:-:*:*:*:*:*:*:* cpe:2.3:h:hp:t730:-:*:*:*:*:*:*:* cpe:2.3:h:hp:mt45:-:*:*:*:*:*:*:* cpe:2.3:a:hp:thinupdate:*:*:*:*:*:*:*:* cpe:2.3:h:hp:t640:-:*:*:*:*:*:*:* cpe:2.3:h:hp:t530:-:*:*:*:*:*:*:* |
|
| CWE | CWE-295 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
13 Oct 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-13 17:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-4499
Mitre link : CVE-2023-4499
CVE.ORG link : CVE-2023-4499
JSON object : View
Products Affected
hp
- thinupdate
- t530
- mt31
- t638
- mt46
- pro_mt440_g3
- mt44
- t540
- t628
- mt22
- t430
- t740
- mt32
- t640
- t630
- mt21
- mt45
- mt43
- t730
- elite_mt645
CWE
CWE-295
Improper Certificate Validation