CVE-2015-2132: Medium severity micro focus operations manager i vulnerability

Published Aug 22, 2015

Updated

Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors.

Affected Software

5 affected components

HP Operations Manager i=9.23

HP Operations Manager i=9.24

HP Operations Manager i=9.25

HP Operations Manager i=10.00

HP Operations Manager i=10.01

Remediation

Patch Available

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04735247

Event History

Aug 22, 2015

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2132?

The severity of CVE-2015-2132 is classified as high due to the potential for local privilege escalation.

How do I fix CVE-2015-2132?

To fix CVE-2015-2132, you should apply the appropriate patches provided by HP for affected versions of the Micro Focus Operations Manager I.

Who is affected by CVE-2015-2132?

CVE-2015-2132 affects local users of HP-UX B.11.11, B.11.23, and B.11.31 systems running specific versions of Micro Focus Operations Manager I.

What are the affected versions in CVE-2015-2132?

The affected versions in CVE-2015-2132 include Micro Focus Operations Manager I versions 9.23, 9.24, 9.25, 10.00, and 10.01.

Can CVE-2015-2132 be exploited remotely?

No, CVE-2015-2132 can only be exploited locally by users who have access to the vulnerable systems.