CVE-2016-4394: Medium severity hp system management homepage vulnerability
Published Oct 28, 2016
·Updated
HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue.
Affected Software
1 affected component
HP System Management Homepage<=7.5.5.0
Event History
Oct 28, 2016
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-4394?
The severity of CVE-2016-4394 is classified as medium, as it allows remote attackers to access sensitive information.
2
How do I fix CVE-2016-4394?
To fix CVE-2016-4394, upgrade to HPE System Management Homepage version 7.6 or later.
3
What vulnerabilities does CVE-2016-4394 address?
CVE-2016-4394 addresses an unspecified vulnerability related to HSTS that can lead to information disclosure.
4
What products are affected by CVE-2016-4394?
CVE-2016-4394 affects HPE System Management Homepage versions prior to 7.6.
5
Can CVE-2016-4394 be exploited remotely?
Yes, CVE-2016-4394 can be exploited remotely by attackers to obtain sensitive information.