CVE-2016-4374 HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and consequently obtain sensitive information...
HighCVSS 7.7
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and consequently obtain sensitive information or cause a denial of service, via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc release control | = 9.13 | No fix listed |
| HP Inc release control | = 9.20 | No fix listed |
| HP Inc release control | = 9.21 | No fix listed |
References
- 92357 vdb-entry
- 1036533 vdb-entry
- h20566.www2.hpe.com mitigation patch vendor-advisory