HP Performance Manager TLS RC4 Algorithm Lets Remote Users Decrypt Data : 8/30/2015 12:48:10 AM
 | This set of templates helps you define your app feature roadmap, now and over time. From our sponsors |
| Vulnerability Databse |
| This module replaces the description field of a feed to the page it links to (in addition, it wipes out the content:encoded field), so you can get its full text. |
HP Performance Manager TLS RC4 Algorithm Lets Remote Users Decrypt Data
8/30/2015 12:00:00 AM
| HP Performance Manager TLS RC4 Algorithm Lets Remote Users Decrypt Data |
| SecurityTracker Alert ID: 1033415 |
| SecurityTracker URL: http://securitytracker.com/id/1033415 |
| CVE Reference: CVE-2015-2808 (Links to External Site) |
| Date: Aug 28 2015 |
| Impact: Disclosure of system information, Disclosure of user information |
| Fix Available: Yes Vendor Confirmed: Yes |
| Version(s): 9.0x, 9.20 |
| Description: A vulnerability was reported in HP Performance Manager. A remote user can obtain potentially sensitive information communicated by target system. A remote user that can monitor TLS network traffic can obtain RC4 encrypted data and conduct a brute-force key guessing attack against RC4 to decrypt the data. |
| Impact: A remote user can obtain potentially sensitive information communicated by target system. |
| Solution: The vendor has provided solution instructions, available at: https://softwaresupport.hp.com/group/softwaresupport/search-result/-/facetsearch/document/KM01766997?lang=en&cc=us&hpappid=113963_OSP_PRO_HPE The vendor's advisory is available at: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190 |
| Vendor URL: h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04772190 (Links to External Site) |
| Cause: Access control error |
| Underlying OS: Linux (Any), UNIX (AIX), UNIX (HP/UX), UNIX (Solaris - SunOS), Windows (Any) |
| |
| Message History: None. |
You are receiving this email because you subscribed to this feed at feedmyinbox.com
If you no longer wish to receive these emails, you can unsubscribe from this feed, or manage all your subscriptions