CVE-2016-4372: Input Validation
HPE iMC PLAT before 7.2 E0403P04, iMC EAD before 7.2 E0405P05, iMC APM before 7.2 E0401P04, iMC NTA before 7.2 E0401P01, iMC BIMS before 7.2 E0402P02, and iMC UAMTAM before 7.2 E0405P05 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4372?
CVE-2016-4372 has a high severity rating due to its ability to allow remote attackers to execute arbitrary commands.
How do I fix CVE-2016-4372?
To fix CVE-2016-4372, you should update your affected HPE Intelligent Management Center software to the latest version that resolves the vulnerability.
What systems are affected by CVE-2016-4372?
CVE-2016-4372 affects several versions of HPE Intelligent Management Center components, including Application Performance Manager, Endpoint Admission Defense, and Network Traffic Analyzer before version 7.2 E0405P05.
What type of vulnerability is CVE-2016-4372?
CVE-2016-4372 is classified as a remote command execution vulnerability caused by processing crafted serialized Java objects.
When was CVE-2016-4372 disclosed?
CVE-2016-4372 was disclosed in 2016 and impacts various versions of HPE iMC software prior to updates released in 2017.