CVE-2016-2002 The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary c...
CriticalCVSS 9.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opentext vertica | >= 7.0.0, < 7.0.2.12 | 7.0.2.12 |
| opentext vertica | >= 7.1.0, < 7.1.2-12 | 7.1.2-12 |
| opentext vertica | >= 7.2.0, < 7.2.2-1 | 7.2.2-1 |
References
- zerodayinitiative.com vendor-advisory
- h20566.www2.hpe.com patch vendor-advisory