CVE-2016-4374info

Summary

by MITRE

HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and consequently obtain sensitive information or cause a denial of service, via unspecified vectors.

Be aware that VulDB is the high quality source for vulnerability data.

Analysis

by VulDB Data Team • 09/12/2022

Xxx Xxxxxxx Xxxxxxx Xxxxxxx X.xx, X.xx, Xxx X.xx Xxxxxx X.xx.xxxx Xx Xxxxxxxx X Xxxxxxxx Xxxxxx-xxxx Xxxxxxx Xxxxxxx Xxxxxxxxxxxxx Xxxx Xxxxxxx Xxxxxxxxxxxxx Xxxxxx Xxxxxxxxx Xx Xxxxxxxxxx Xxx Xxxxxxxxxxx'x Xxxxxxx Xxxxxxxx Xxxxxxxxxx. Xxxx Xxxxxxxxxxxxx Xxxxx Xxxxx Xxx Xxx-xxx Xxxxxxxx Xx Xxxxxx-xxxx Xxxxxxx Xxxxxxx, Xxxxx Xxxxxxxxxx X Xxxxxxxxxxx Xxxxxxxx Xxxx Xx Xxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxx Xxxxx Xxxx Xxxxx Xxxxx Xxxxx Xx Xxxxxxxx Xx Xxxxxxxx Xxxxxxx Xxxxxxxxx. Xxx Xxxx Xxxxxx Xx Xxx Xxxxxxxxxxx'x Xxxxxxxx Xx Xxxx-xxxxxxxx Xxxxx Xxxx Xx Xxxxxxxxx Xx Xxxx Xx Xxxx Xxxxxxxx, Xxxxxxxx Xxxxxxxxx Xx Xxxxx Xxx Xxxxxx Xxxx Xxxxxx Xxxxxxxxxx Xxxxxxxx Xx Xxxxxxxx Xxxxxxxx Xx Xxxxxxxx Xxxxxxx.

Xxx Xxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxx Xxxx Xxxxxxxxxxxx Xxxxxxxxxx Xx Xxxx-xxxxxxxx Xxxx Xx Xxxxxxx Xxxxxxxxxx Xxxxxx Xxx Xxxxxxx Xxxxxxx Xxxxxxxxxxx'x Xxxxxxxxxx Xxxxxxxx. Xxxx Xxxxxxxxxxxxx Xxxxx Xxxxxx Xxxxxxxx Xxxxxxxxxx Xxxxxxxxxxx Xxxxxxx Xxxx Xx Xxx Xxxxxxxxxx, Xxx Xxxxxx Xxxxx Xx Xxxxxxxx Xxxxxxxx Xx Xxxxxxxx Xxxxx Xxxxxx Xxxxxx Xxxxxxxxxx Xxxx Xx Xxxxxxx Xxxxxxxx. Xxxx Xxxxxx Xxxxxxxxx Xx Xxxxxxxxxxx Xxxxxx Xxxxxxxx Xxxxxxxxx Xxxx Xxxxxx Xxxxxxxx Xx Xxxxxxxxxx, Xxxxxxxxx Xxxxxxxx Xxxxxxxxx, Xxxxxxxxxx Xxxxxxxxxx, Xx Xxxxx Xxxxxxxxx Xxxxxxx Xxxxxx Xxx Xxxxxxxxxxxx'x Xxxxxxx Xxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxxxx Xxxxxxx Xxxx Xxxxxx Xxxxxxx Xxxx Xxxxxxxxx Xxxxxxxxxxxx Xx Xxx Xxxxxxx Xxxxx Xxxxxx Xxx Xxxxxxxxxxx'x Xxxxxxx Xxxxxxxx Xxxx.

Xxx Xxxxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxx Xxxxxx Xxxxxxxxxxx Xxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxx Xxxxxx Xxxxxxxxxx Xxx Xxxxxxx Xxxxxxxxxx. Xx Xxxxxxxx Xxxx Xxxxx Xxxxxxxxxxx Xxx Xxxxxxx Xxxx Xxxxxxxx Xx Xxxx Xxxxxxxxxxxx Xxxxxx Xx Xxxxxxxx Xxxxxxx Xxxxxxxxx, Xxxxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xx Xxxxxxxxxx Xxxxxxxxx Xxxxxxxxxxxxx Xxxx, Xxxxxxxxxxx, Xx Xxxxxxxx-xxxxxxxx Xxxxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxx Xxxx Xx Xxxxxxxxx Xx Xxxxx Xxxxxx Xx Xxxxxxx Xxxxxxxxxx Xx Xxxxxxxxx Xxx Xxxxxxxxxxx Xx Xxxx Xxxxxxxxx Xxxxxxxx Xx Xxxxxx Xxxxxxx, Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxx Xx Xxxxxxxxx Xxxxxx Xxxxxx. Xxxx Xxxx Xx Xxxxxxxxxxxx Xxxxxxxxxx Xx Xxxxxxxxxx Xxxxxxxxxxxx Xxxxx Xxxxxxx Xxxxxxx Xxxxxxx Xxxxx Xxxx Xxxxxxxx Xxxxxxxxxx Xxx Xxxxxx Xx Xxxxxxxxxx Xxxxxxxxxxxx, Xxxxxx Xxxx Xxxxxxxxxx Xxxxxxx Xxx Xxxxxxxxx Xxxxxxx Xxxxxxx Xxxxxxxx Xxxxxx Xxx Xxxxxxx Xxxxxxxxxxxxxx.

Xxxxxxxxxxxxx Xxxxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxx Xxx Xxxxxx-xxxxxxxx Xxxxx Xxx Xxx Xxxxxxx Xxxxxxx X.xx.xxxx Xx, Xxxxx Xxxxxxxxx Xxx Xxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxx Xxxxx Xxxxxxxxxx Xxx Xxxxxxx Xxxxxxxxxxxx Xxxxxxxxxx. Xxxxxxxx Xxxxx Xxxxxx Xxxx Xxxxxxxxx Xxxxxxx-xxxxx Xxxxxxxx Xxxxxxxxx Xxxxxxxx Xxxxx Xxxx Xxxxxxxx Xxxxxxxx Xxxxxxxxxxx Xxxx Xxx Xxxxxxx Xxxxxxx Xxxxxxxxxxx Xx Xxxxxxxx Xxxxxxxx, Xxx Xxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xx Xxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxx Xxxx Xxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxx Xxxx Xxx&xx Xxxxxxxxx Xxxxx Xxx Xxxxxx-xxxx Xxxxxxx Xxxxxxx, Xxx Xxxxxxxxxxxxx Xxxxxx Xxxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxxxx Xx Xxxxx Xxxxxxxxx Xxx Xxxxxxx Xxxxxxx Xxxxxxxxxxxx Xx Xxxxxxxx Xxx Xxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxxxx. Xxxxxxxxxxxx, Xxxxxxx Xxxxxxxx Xxxxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxx Xxxxxx Xx Xxxxxxxxx Xx Xxxxxxxx Xxxxxxx Xxxxxxxxxx Xx Xxxxx Xxxxxxxxxx Xxxxxxxxxxxx Xxxx Xxx Xx Xxxxxxxxxxx Xx Xxxxxxx Xxxxxx Xxxxxxx, Xxxxxxxxxxxx Xxxxx Xxxxxxxx Xxxx Xxxxx Xx Xxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxx.

Sources