CVE-2015-6860

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2015-6860

8.4 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 2.5 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

H

PE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2015-6859.

References
Link Resource
http://www.securitytracker.com/id/1034410
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918 Patch Vendor Advisory
http://www.securitytracker.com/id/1034410
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:hp:network_switch_software:*:*:*:*:*:*:*:*
OR cpe:2.3:h:hp:j8692a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j8693a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j8697a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j8698a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j8699a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j8700a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j8715a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j8715b:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j8992a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9091a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9263a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9264a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9265a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9310a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9311a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9447a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9448a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9451a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9452a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9470a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9471a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9472a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9473a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9475a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9532a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9533a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9539a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9540a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9573a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9574a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9575a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9576a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9584a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9585a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9586a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9587a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9588a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9638a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9639a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9640a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9641a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9642a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9643a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9821a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9822a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9823a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9824a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9825a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9826a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9850a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9851a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9866a:*:*:*:*:*:*:*:*
cpe:2.3:h:hp:j9868a:*:*:*:*:*:*:*:*
History

21 Nov 2024, 02:35

Type Values Removed Values Added
References () http://www.securitytracker.com/id/1034410 - () http://www.securitytracker.com/id/1034410 -
References () https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918 - Patch, Vendor Advisory () https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918 - Patch, Vendor Advisory
Information

Published : 2016-01-05 11:59

Updated : 2025-04-12 10:46

NVD link : CVE-2015-6860

Mitre link : CVE-2015-6860

CVE.ORG link : CVE-2015-6860

JSON object : View

Products Affected

hp

CWE
CWE-264

Permissions, Privileges, and Access Controls