Vulnerability Details CVE-2015-7863
The default configuration of Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 enables a remote Notify capability without the Extended Notify Security features, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 75.4%
CVSS Severity
CVSS v2 Score 5.0
References
- http://www.securitytracker.com/id/1033862
- https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features
- http://www.securitytracker.com/id/1033862
- https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features
Products affected by CVE-2015-7863
-
cpe:2.3:a:accelerite:radia_client_automation:7.9
-
cpe:2.3:a:accelerite:radia_client_automation:8.1
-
cpe:2.3:a:accelerite:radia_client_automation:9.0
-
cpe:2.3:a:accelerite:radia_client_automation:9.1