CVE-1999-0992: Critical severity hp vvos vulnerability
HP VirtualVault with the PHSS17692 patch allows unprivileged processes to bypass access restrictions via the Trusted Gateway Proxy (TGP).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the Trusted Gateway Proxy if it is not required; otherwise configure TGP to only accept connections from explicitly trusted management hosts and networks.
HP VirtualVault (Trusted Gateway Proxy) TGP access = disabled or restricted to trusted hosts - Compensating control
Restrict network access to the Trusted Gateway Proxy (TGP) for HP VirtualVault: enforce firewall/ACL rules to allow only trusted management IPs/subnets to reach the TGP interface and block all other hosts.
- Operational
Inventory and audit HP VirtualVault instances to identify systems with the PHSS_17692 patch applied; isolate or place affected systems into a restricted network segment pending vendor guidance or a remediation update.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0992?
CVE-1999-0992 is considered to have high severity due to the potential for unprivileged processes to bypass access restrictions.
How do I fix CVE-1999-0992?
To fix CVE-1999-0992, it is recommended to apply the relevant patches, specifically the PHSS_17692 patch for HP VirtualVault.
What software is affected by CVE-1999-0992?
CVE-1999-0992 affects HP Virtual Vault systems that have not been patched appropriately.
What impact does CVE-1999-0992 have on security?
CVE-1999-0992 allows unauthorized access by enabling unprivileged processes to evade access controls, posing a significant risk to data security.
Who is vulnerable to CVE-1999-0992?
Any organization using HP VirtualVault without the PHSS_17692 patch is vulnerable to CVE-1999-0992.