CVE-2015-2108 Information disclosure in n/a

What is CVE-2015-2108?

CVE-2015-2108 is a low-severity vulnerability in n/a, published on 31 Mar 2015. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Unspecified vulnerability in Powershell Operations in HP Operations Orchestration 9.x and 10.x allows remote authenticated users to obtain sensitive information via unknown vectors.

Weakness: CWE-200

Which versions are affected by CVE-2015-2108?

It affects 1 product.

Products include Hp Operations Orchestration.

How do I fix CVE-2015-2108?

No fix has been published for CVE-2015-2108 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-2108 being exploited?

There is no known exploitation of CVE-2015-2108 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2012-3258 Code injection in n/a Critical 10.0
• CVE-2016-8519 Deserialization in Operations Orchestration Critical 9.8
• CVE-2017-8994 Code injection in HPE Operations Orchestration Critical 9.8
• CVE-2016-1997 Deserialization in n/a Critical 9.8
• CVE-2015-2109 Auth bypass in n/a High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-vvm7-hf3m-v4xp.