Detections
Analytics
HP Operations Manager for Windows 8.x and 9.0 Java Object Deserialization RCE
critical Nessus Plugin ID 88562
Language:
Synopsis
The remote host is affected by a remote code execution vulnerability.Description
The version of HP Operations Manager installed on the remote host has the Sam Admin Adapter installed. This package is no longer supported by HP and is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections (ACC) library. An unauthenticated, remote attacker can exploit this, by sending a crafted SOAP request, to execute arbitrary code on the target host.Solution
Remove the Sam Admin Adapter package since it is unsupported.See Also
Plugin Details
Severity: Critical
ID: 88562
File Name: hp_operations_manager_for_win_CVE-2016-1985_local.nasl
Version: 1.8
Type: local
Agent: windows
Family: Windows
Published: 2/3/2016
Updated: 11/20/2019
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.5
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2016-1985
CVSS v3
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:hp:operations_manager
Required KB Items: installed_sw/HP Operations Manager for Windows
Exploit Ease: No known exploits are available
Patch Publication Date: 1/29/2016
Vulnerability Publication Date: 1/28/2015
Reference Information
CVE: CVE-2016-1985
BID: 82259