ByteOS Network

NVD Vulnerability Details :

CVE-2019-16285

Modified

Source-hp-security-alert@hp.com

Published At-22 Nov, 2019 | 22:15

Updated At-24 Aug, 2020 | 17:37

If a local user has been configured and logged in, an unauthenticated attacker with physical access may be able to extract sensitive information onto a local drive.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	4.6	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

HP Inc.

>>thinpro_linux>>6.2

cpe:2.3:a:hp:thinpro_linux:6.2:*:*:*:*:*:*:*

HP Inc.

>>thinpro_linux>>6.2.1

cpe:2.3:a:hp:thinpro_linux:6.2.1:*:*:*:*:*:*:*

HP Inc.

>>thinpro_linux>>7.0

cpe:2.3:a:hp:thinpro_linux:7.0:*:*:*:*:*:*:*

HP Inc.

>>thinpro_linux>>7.1

cpe:2.3:a:hp:thinpro_linux:7.1:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://packetstormsecurity.com/files/156895/HP-ThinPro-6.x-7.x-Information-Disclosure.html	hp-security-alert@hp.com	N/A
http://seclists.org/fulldisclosure/2020/Mar/30	hp-security-alert@hp.com	N/A
https://support.hp.com/us-en/document/c06509350	hp-security-alert@hp.com	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History