7.2
CVSSv2

CVE-2019-16287

Published: 22/11/2019 Updated: 24/08/2020
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 6.8 | Impact Score: 5.9 | Exploitability Score: 0.9
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

In HP ThinPro Linux 6.2, 6.2.1, 7.0 and 7.1, an attacker may be able to leverage the application filter bypass vulnerability to gain privileged access to create a file on the local file system whose presence puts the device in Administrative Mode, which will allow the malicious user to executed commands with elevated privileges.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

hp thinpro 6.2

hp thinpro 6.2.1

hp thinpro 7.0

hp thinpro 7.1

Vendor Advisories

Potential security vulnerabilities have been identified with certain versions of HP ThinPro components that may allow unauthorized information disclosure, privilege escalation, and arbitrary code execution ...
Potential security vulnerabilities have been identified with certain versions of HP ThinPro components that may allow unauthorized information disclosure, privilege escalation, and arbitrary code execution ...

Exploits

HP ThinPro versions 71, 70, 621, and 62 suffer from a local privilege escalation vulnerability ...

Mailing Lists

<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> HP ThinPro - Privilege escalation <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Eldar Marcussen &lt;wir ...