CVE-2016-6152: Critical severity broadcom ehealth vulnerability
Published Jul 26, 2016
·Updated
CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors.
Affected Software
18 affected components
Broadcom Ehealth=6.3
Broadcom Ehealth=6.3.1
Broadcom Ehealth=6.3.2
Broadcom Ehealth=6.3.2.01
Broadcom Ehealth=6.3.2.02
Broadcom Ehealth=6.3.2.03
Broadcom Ehealth=6.3.2.04
Broadcom Ehealth=6.3.2.05
Broadcom Ehealth=6.3.2.06
Broadcom Ehealth=6.3.2.07
Broadcom Ehealth=6.3.2.08
Broadcom Ehealth=6.3.2.09
Broadcom Ehealth=6.3.2.10
Broadcom Ehealth=6.3.2.11
Broadcom Ehealth=6.3.2.12
CA eHealth=6.2
CA eHealth=6.2.1
CA eHealth=6.2.2
Remediation
Event History
Jul 26, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6152?
CVE-2016-6152 has been classified as a high severity vulnerability due to its potential to allow remote authenticated users to execute arbitrary commands.
2
How do I fix CVE-2016-6152?
To fix CVE-2016-6152, upgrade CA eHealth to version 6.3.2.13 or later.
3
Who is affected by CVE-2016-6152?
CVE-2016-6152 affects users of CA eHealth versions 6.2.x and 6.3.x prior to 6.3.2.13.
4
What types of attacks can CVE-2016-6152 enable?
CVE-2016-6152 can enable denial of service attacks or allow execution of arbitrary commands by authenticated users.
5
When was CVE-2016-6152 disclosed?
CVE-2016-6152 was disclosed on July 21, 2016.