Vulnerabilities > CVE-2016-4374 - Server-Side Request Forgery (SSRF) vulnerability in HP Release Control 9.13/9.20/9.21

047910
CVSS 4.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
hp
CWE-918
NVD
Published: 2016-08-08
Updated: 2016-11-28

Summary

HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and consequently obtain sensitive information or cause a denial of service, via unspecified vectors.

Vulnerable Configurations

Part Description Count
Application
Hp
3

Common Weakness Enumeration (CWE)

References