CVE-2016-4368 - Vulnerability Details

Vendors	Products
Hp	Universal Cmbd Configuration Manager Universal Cmbd Foundation Universal Discovery

Link	Providers
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164408

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-05-06T00:00:00", "descriptions": [{"lang": "en", "value": "HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-06-08T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164408"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2016-4368", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164408", "refsource": "CONFIRM", "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164408"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T00:25:14.531Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164408"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2016-4368", "datePublished": "2016-06-08T14:00:00", "dateReserved": "2016-04-29T00:00:00", "dateUpdated": "2024-08-06T00:25:14.531Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2016-05-06T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2016-06-08T12:57:01 (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164408 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

ID : CVE-2016-4368 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164408 (string)

refsource : CONFIRM (string)

url : https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164408 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-06T00:25:14.531Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164408 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2016-4368 (string)

datePublished : 2016-06-08T14:00:00 (string)

dateReserved : 2016-04-29T00:00:00 (string)

dateUpdated : 2024-08-06T00:25:14.531Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "4CC3120E-4D93-48EA-B9BF-52F6977F471D", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.01:*:*:*:*:*:*:*", "matchCriteriaId": "FA100E6A-DA01-4218-877C-8BC9BBDB6492", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.10:*:*:*:*:*:*:*", "matchCriteriaId": "4BB1F1CD-D4AC-413E-86CE-B9184E598383", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.11:*:*:*:*:*:*:*", "matchCriteriaId": "4B771DD1-6E58-4B87-97A3-6AE14C12B934", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.20:*:*:*:*:*:*:*", "matchCriteriaId": "2BE51B2D-7DF1-4508-B5A3-032E20A46188", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_cmbd_foundation:10.21:*:*:*:*:*:*:*", "matchCriteriaId": "64D56642-E7F5-4BE6-961F-4BBAE8A88E14", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "D0CFBF73-570C-44DF-8D72-C56B2DEFAB3B", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.01:*:*:*:*:*:*:*", "matchCriteriaId": "9F1933BF-A0CB-4829-920D-0CC064749726", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.10:*:*:*:*:*:*:*", "matchCriteriaId": "77916DDD-6005-4E8F-A3CC-C7581EEB37F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.11:*:*:*:*:*:*:*", "matchCriteriaId": "FBE8791E-1397-48B0-BDD6-E085AD43C8B7", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.20:*:*:*:*:*:*:*", "matchCriteriaId": "ACCC4C6A-7D9B-4664-89AD-48FFE3517335", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.21:*:*:*:*:*:*:*", "matchCriteriaId": "AAC95092-E0A9-4269-88C0-258EB0C5BFAE", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:universal_discovery:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "1C0FC8DA-FB4E-45A5-A340-E9C5962BC920", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_discovery:10.01:*:*:*:*:*:*:*", "matchCriteriaId": "F1BDE22A-E753-4807-936C-A8545B3849D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_discovery:10.10:*:*:*:*:*:*:*", "matchCriteriaId": "6DF1C0E2-BA76-4206-9E8F-6ECCBAE5329E", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_discovery:10.11:*:*:*:*:*:*:*", "matchCriteriaId": "2C6623FD-2113-4966-B72F-46A7E7B4ABDF", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_discovery:10.20:*:*:*:*:*:*:*", "matchCriteriaId": "074205F5-1AE3-47E3-9E86-454625AE0FEB", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:universal_discovery:10.21:*:*:*:*:*:*:*", "matchCriteriaId": "EF19B5E6-B2E0-4C56-B1A0-0144A8C95BFB", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library."}, {"lang": "es", "value": "HPE Universal CMDB 10.0 hasta la versi\u00f3n 10.21, Universal CMDB Configuration Manager 10.0 hasta la versi\u00f3n 10.21 y Universal Discovery 10.0 hasta la versi\u00f3n 10.21 permiten a atacantes remotos ejecutar comandos arbitrarios a trav\u00e9s de un objeto Java serializado manipulado, relacionado con la librer\u00eda Apache Commons Collections (ACC)."}], "id": "CVE-2016-4368", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-06-08T14:59:59.880", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164408"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164408"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:hp:universal_cmbd_foundation:10.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 4CC3120E-4D93-48EA-B9BF-52F6977F471D (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:hp:universal_cmbd_foundation:10.01:*:*:*:*:*:*:* (string)

matchCriteriaId : FA100E6A-DA01-4218-877C-8BC9BBDB6492 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:hp:universal_cmbd_foundation:10.10:*:*:*:*:*:*:* (string)

matchCriteriaId : 4BB1F1CD-D4AC-413E-86CE-B9184E598383 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:hp:universal_cmbd_foundation:10.11:*:*:*:*:*:*:* (string)

matchCriteriaId : 4B771DD1-6E58-4B87-97A3-6AE14C12B934 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:hp:universal_cmbd_foundation:10.20:*:*:*:*:*:*:* (string)

matchCriteriaId : 2BE51B2D-7DF1-4508-B5A3-032E20A46188 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:hp:universal_cmbd_foundation:10.21:*:*:*:*:*:*:* (string)

matchCriteriaId : 64D56642-E7F5-4BE6-961F-4BBAE8A88E14 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.0:*:*:*:*:*:*:* (string)

matchCriteriaId : D0CFBF73-570C-44DF-8D72-C56B2DEFAB3B (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.01:*:*:*:*:*:*:* (string)

matchCriteriaId : 9F1933BF-A0CB-4829-920D-0CC064749726 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.10:*:*:*:*:*:*:* (string)

matchCriteriaId : 77916DDD-6005-4E8F-A3CC-C7581EEB37F4 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.11:*:*:*:*:*:*:* (string)

matchCriteriaId : FBE8791E-1397-48B0-BDD6-E085AD43C8B7 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.20:*:*:*:*:*:*:* (string)

matchCriteriaId : ACCC4C6A-7D9B-4664-89AD-48FFE3517335 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:hp:universal_cmbd_configuration_manager:10.21:*:*:*:*:*:*:* (string)

matchCriteriaId : AAC95092-E0A9-4269-88C0-258EB0C5BFAE (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:hp:universal_discovery:10.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 1C0FC8DA-FB4E-45A5-A340-E9C5962BC920 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:hp:universal_discovery:10.01:*:*:*:*:*:*:* (string)

matchCriteriaId : F1BDE22A-E753-4807-936C-A8545B3849D0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:hp:universal_discovery:10.10:*:*:*:*:*:*:* (string)

matchCriteriaId : 6DF1C0E2-BA76-4206-9E8F-6ECCBAE5329E (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:hp:universal_discovery:10.11:*:*:*:*:*:*:* (string)

matchCriteriaId : 2C6623FD-2113-4966-B72F-46A7E7B4ABDF (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:hp:universal_discovery:10.20:*:*:*:*:*:*:* (string)

matchCriteriaId : 074205F5-1AE3-47E3-9E86-454625AE0FEB (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:hp:universal_discovery:10.21:*:*:*:*:*:*:* (string)

matchCriteriaId : EF19B5E6-B2E0-4C56-B1A0-0144A8C95BFB (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : HPE Universal CMDB 10.0 through 10.21, Universal CMDB Configuration Manager 10.0 through 10.21, and Universal Discovery 10.0 through 10.21 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. (string)

}

1 : { »

lang : es (string)

value : HPE Universal CMDB 10.0 hasta la versión 10.21, Universal CMDB Configuration Manager 10.0 hasta la versión 10.21 y Universal Discovery 10.0 hasta la versión 10.21 permiten a atacantes remotos ejecutar comandos arbitrarios a través de un objeto Java serializado manipulado, relacionado con la librería Apache Commons Collections (ACC). (string)

}

]

id : CVE-2016-4368 (string)

lastModified : 2025-04-12T10:46:40.837 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 7.5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2016-06-08T14:59:59.880 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164408 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05164408 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-20 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object