CVE-2015-6859 : HPE Network Switches with software 15.16.x and 15.17.x allow local users to bypass intended access restrictions via unsp

CVSS scores for CVE-2015-6859

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2015-6859

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-6859

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04920918

HPSBHF03431 rev.3 - HPE Network Switches, local Bypass of Security Restrictions, Indirect Vulnerabilities
Patch;Vendor Advisory

CVEs referencing this url
http://www.securitytracker.com/id/1034410

HP Network Switch Unspecified Flaws Let Local Users Bypass Security Restrictions and Gain Elevated Privileges - SecurityTracker

CVEs referencing this url

Products affected by CVE-2015-6859

HP » Network Switch Software
Versions up to, including, (<=) 15.18.0
cpe:2.3:o:hp:network_switch_software:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » J8692a
When used together with: HP » J8693a
When used together with: HP » J8697a
When used together with: HP » J8698a
When used together with: HP » J8699a
When used together with: HP » J8700a
When used together with: HP » J8715a
When used together with: HP » J8715b
When used together with: HP » J8992a
When used together with: HP » J9091a
When used together with: HP » J9263a
When used together with: HP » J9264a
When used together with: HP » J9265a
When used together with: HP » J9310a
When used together with: HP » J9311a
When used together with: HP » J9447a
When used together with: HP » J9448a
When used together with: HP » J9451a
When used together with: HP » J9452a
When used together with: HP » J9470a
When used together with: HP » J9471a
When used together with: HP » J9472a
When used together with: HP » J9473a
When used together with: HP » J9475a
When used together with: HP » J9532a
When used together with: HP » J9533a
When used together with: HP » J9539a
When used together with: HP » J9540a
When used together with: HP » J9573a
When used together with: HP » J9574a
When used together with: HP » J9575a
When used together with: HP » J9576a
When used together with: HP » J9584a
When used together with: HP » J9585a
When used together with: HP » J9586a
When used together with: HP » J9587a
When used together with: HP » J9588a
When used together with: HP » J9638a
When used together with: HP » J9639a
When used together with: HP » J9640a
When used together with: HP » J9641a
When used together with: HP » J9642a
When used together with: HP » J9643a
When used together with: HP » J9821a
When used together with: HP » J9822a
When used together with: HP » J9823a
When used together with: HP » J9824a
When used together with: HP » J9825a
When used together with: HP » J9826a
When used together with: HP » J9850a
When used together with: HP » J9851a
When used together with: HP » J9866a
When used together with: HP » J9868a

Vulnerability Details : CVE-2015-6859

Exploit prediction scoring system (EPSS) score for CVE-2015-6859

CVSS scores for CVE-2015-6859

CWE ids for CVE-2015-6859

References for CVE-2015-6859

Products affected by CVE-2015-6859