CVE-2016-2002
Critical
Description
The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417.
SeverityCritical
CVSS9.8
Exploit probability—
ProductOpentext Vertica
PublishedApr 20, 2016
First seenApr 20, 2016
How to fix
Update
- opentext vertica7.0.2.12, 7.1.2-12, 7.2.2-1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opentext vertica | 7.0.0 ≤ v < 7.0.2.12, 7.1.0 ≤ v < 7.1.2-12, 7.2.0 ≤ v < 7.2.2-1 | 7.0.2.12, 7.1.2-12, 7.2.2-1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.