CVE-2015-2111

Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/bid/73481
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04626732	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:hp:intelligent_provisioning:1.40:::::::*
	cpe:2.3:a:hp:intelligent_provisioning:1.50:::::::*
	cpe:2.3:a:hp:intelligent_provisioning:1.60:::::::*

OR	cpe:2.3:o:microsoft:windows_server_2008:r2:::::::*
	cpe:2.3:o:microsoft:windows_server_2012:-:::::::*

History

No history.

Information

Published : 2015-04-04 01:59

Updated : 2016-11-30 03:01

NVD link : CVE-2015-2111

Mitre link : CVE-2015-2111

CVE.ORG link : CVE-2015-2111

JSON object : View

Products Affected

microsoft

windows_server_2012
windows_server_2008

hp

intelligent_provisioning

CWE

NVD-CWE-noinfo

{"id": "CVE-2015-2111", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-04-04T01:59:03.563", "references": [{"url": "http://www.securityfocus.com/bid/73481", "source": "hp-security-alert@hp.com"}, {"url": "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04626732", "tags": ["Patch", "Vendor Advisory"], "source": "hp-security-alert@hp.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad no especificada en HP Intelligent Provisioning 1.40 hasta 1.60 en Windows Server 2008 R2 y 2012 permite a usuarios locales obtener informaci\u00f3n sensible a trav\u00e9s de vectores desconocidos."}], "lastModified": "2016-11-30T03:01:12.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:intelligent_provisioning:1.40:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F3C978F-44D2-47E3-911E-89BD81C2C52B"}, {"criteria": "cpe:2.3:a:hp:intelligent_provisioning:1.50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C22F2F7-AACA-41B2-BEA4-CBF26BA40E84"}, {"criteria": "cpe:2.3:a:hp:intelligent_provisioning:1.60:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5C53395-2EE4-48EA-9175-049C108F7689"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "36559BC0-44D7-48B3-86FF-1BFF0257B5ED"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "hp-security-alert@hp.com"}