{ "id": "CVE-2015-5443", "sourceIdentifier": "hp-security-alert@hp.com", "published": "2015-10-12T10:59:05.680", "lastModified": "2015-10-13T17:04:14.760", "vulnStatus": "Analyzed", "descriptions": [ { "lang": "en", "value": "HP 3PAR Service Processor SP 4.2.0.GA-29 (GA) SPOCC, SP 4.3.0.GA-17 (GA) SPOCC, and SP 4.3.0-GA-24 (MU1) SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors." }, { "lang": "es", "value": "HP 3PAR Service Processor SPA 4.2.0.GA-29 (GA) SPOCC, SP 4.3.0.GA-17 (GA) SPOCC y SP 4.3.0-GA-24 (MU1) SPOCC permite a usuarios remotos autenticados obtener informaci\u00f3n sensible a trav\u00e9s de vectores no especificados." } ], "metrics": { "cvssMetricV2": [ { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "2.0", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector": "NETWORK", "accessComplexity": "LOW", "authentication": "SINGLE", "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 4.0 }, "baseSeverity": "MEDIUM", "exploitabilityScore": 8.0, "impactScore": 2.9, "acInsufInfo": true, "obtainAllPrivilege": false, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false } ] }, "weaknesses": [ { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-200" } ] } ], "configurations": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:hp:3par_service_processor_sp:4.2.0.ga-29_\\(ga\\)_spocc:*:*:*:*:*:*:*", "matchCriteriaId": "0F79B187-C177-4126-8A37-170C052F9036" }, { "vulnerable": true, "criteria": "cpe:2.3:a:hp:3par_service_processor_sp:4.3.0.ga-17_\\(ga\\)_spocc:*:*:*:*:*:*:*", "matchCriteriaId": "9C053B1F-F98C-427F-A4EF-44880E3FB135" }, { "vulnerable": true, "criteria": "cpe:2.3:a:hp:3par_service_processor_sp:4.3.0.ga-24_\\(mu1\\)_spocc:*:*:*:*:*:*:*", "matchCriteriaId": "CE4FA03F-DA26-464F-8C48-1B09306E6C09" } ] } ] } ], "references": [ { "url": "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04822249", "source": "hp-security-alert@hp.com", "tags": [ "Vendor Advisory" ] } ] }