Hpe ucmdb Browser Vulnerability (CVE-2015-6862)

Hpe ucmdb Browser Vulnerability (CVE-2015-6862)

Affected Systems:
Hp hpe ucmdb Browser (4.02)
Description:
CVE (CAN) ID: CVE-2015-6862
Hpe ucmdb Browser is a lightweight Web client that accesses UCMDB data.
Hpe ucmdb Browser 4.02 and earlier versions have security vulnerabilities. Remote attackers can exploit this vulnerability to obtain sensitive information or bypass target access restrictions.
 
Link: https://h20564.www2.hpe.com/hpsc/doc/public/display? DocId = emr_na-c04924053
*>
Suggestion:
Vendor patch:
HP
--
HP has released a security notice (HPSBGN03530) and corresponding patches for this:
HPSBGN03530: hpe ucmdb Browser, Remote Disclosure of Sensitive Information, Local Unauthorized