CVE-2016-4374 in Release Control
Summary
HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and consequently obtain sensitive information or cause a denial of service, via unspecified vectors.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
04/29/2016
Disclosure
08/07/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 90608 | HPE Release Control server-side request forgery | 918 | Not defined | Official fix | CVE-2016-4374 |