VDB

GCVE-110-CERTCC-2015-267328

GCVE-110-CERTCC-2015-267328
Advisory PublishedCVSS 9.3/10
Vulnetix · Advisory published April 18, 2016
The HP Data Protector does not perform user authentication, even when Encrypted Control Communications is enabled, and contains an embedded SSL private key that is shared among all installations.

Risk Scores

CVSS 2.0
9.3/10
Critical · AV:N/AC:M/Au:N/C:C/I:C/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact2d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score8.4remediation_levelUreport_confidenceCenvironmental_score6.299215776target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

References

Browse GCVE Records

73,393 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›