CVE-2024-11856 - Vulnerability Details - OpenCVE

A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00096.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

Fixes

Solution

Please see security bulletin HPESBMU04762

Workaround

No workaround given by the vendor.

References

Link	Providers
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbmu04762en_us&docLocale=en_US

History

Mon, 02 Dec 2024 23:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 02 Dec 2024 03:15:00 +0000

Type	Values Removed	Values Added
Description		A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification.
Title		HPE IceWall Products, Remote Unauthorized Data Modification
Weaknesses		CWE-522
References		https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbmu04762en_us&docLocale=en_US
Metrics		cvssV3_1 `{'score': 3.7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'}`

MITRE

Status: PUBLISHED

Assigner: hpe

Published: 2024-12-02T02:43:51.554Z

Updated: 2024-12-02T22:13:39.635Z

Reserved: 2024-11-27T01:24:12.689Z

Link: CVE-2024-11856

Vulnrichment

Updated: 2024-12-02T22:13:34.692Z

NVD

Status : Received

Published: 2024-12-02T03:15:13.713

Modified: 2024-12-02T03:15:13.713

Link: CVE-2024-11856

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-11856", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "state": "PUBLISHED", "assignerShortName": "hpe", "dateReserved": "2024-11-27T01:24:12.689Z", "datePublished": "2024-12-02T02:43:51.554Z", "dateUpdated": "2024-12-02T22:13:39.635Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "platforms": ["Linux", "Windows", "HP-UX"], "product": "HPE IceWall", "vendor": "Hewlett Packard Enterprise", "versions": [{"lessThan": "Patch Release 14", "status": "affected", "version": "IceWall Gen11", "versionType": "Patch"}, {"lessThan": "Patch Release 10", "status": "affected", "version": "IceWall SSO", "versionType": "Patch"}]}], "datePublic": "2024-11-27T02:34:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification.</span>"}], "value": "A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification."}], "impacts": [{"capecId": "CAPEC-545", "descriptions": [{"lang": "en", "value": "CAPEC-545 Pull Data from System Resources"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-522", "description": "CWE-522 Insufficiently Protected Credentials", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2024-12-02T02:43:51.554Z"}, "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbmu04762en_us&docLocale=en_US"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Please see security bulletin \n\n<span style=\"background-color: rgb(255, 255, 255);\">HPESBMU04762 </span>"}], "value": "Please see security bulletin\u00a0\n\nHPESBMU04762"}], "source": {"advisory": "HPESBMU04762", "discovery": "INTERNAL"}, "title": "HPE IceWall Products, Remote Unauthorized Data Modification", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-12-02T22:12:30.891086Z", "id": "CVE-2024-11856", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-02T22:13:39.635Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-11856", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-02T22:12:30.891086Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-02T22:13:34.692Z"}}], "cna": {"title": "HPE IceWall Products, Remote Unauthorized Data Modification", "source": {"advisory": "HPESBMU04762", "discovery": "INTERNAL"}, "impacts": [{"capecId": "CAPEC-545", "descriptions": [{"lang": "en", "value": "CAPEC-545 Pull Data from System Resources"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hewlett Packard Enterprise", "product": "HPE IceWall", "versions": [{"status": "affected", "version": "IceWall Gen11", "lessThan": "Patch Release 14", "versionType": "Patch"}, {"status": "affected", "version": "IceWall SSO", "lessThan": "Patch Release 10", "versionType": "Patch"}], "platforms": ["Linux", "Windows", "HP-UX"], "defaultStatus": "affected"}], "solutions": [{"lang": "en", "value": "Please see security bulletin\u00a0\n\nHPESBMU04762", "supportingMedia": [{"type": "text/html", "value": "Please see security bulletin \n\n<span style=\"background-color: rgb(255, 255, 255);\">HPESBMU04762 </span>", "base64": false}]}], "datePublic": "2024-11-27T02:34:00.000Z", "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbmu04762en_us&docLocale=en_US"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">A security vulnerability in HPE IceWall products could be exploited remotely to cause Unauthorized Data Modification.</span>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-522", "description": "CWE-522 Insufficiently Protected Credentials"}]}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2024-12-02T02:43:51.554Z"}}}, "cveMetadata": {"cveId": "CVE-2024-11856", "state": "PUBLISHED", "dateUpdated": "2024-12-02T22:13:39.635Z", "dateReserved": "2024-11-27T01:24:12.689Z", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "datePublished": "2024-12-02T02:43:51.554Z", "assignerShortName": "hpe"}, "dataVersion": "5.1"}