CVE-2015-7863

The default configuration of Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 enables a remote Notify capability without the Extended Notify Security features, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2015-10-19

Last modified

2024-08-06

Weaknesses

CWE-254

Affected products

• Radia Client Automation (Accelerite)

References

• http://www.securitytracker.com/id/1033862
• https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-…