CVE-2020-6920 — HP Support Assistant vulnerability

3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.2%
top 55.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
HP Support AssistantHP Support Assistant
Timeline
PublishedFeb 16
Latest updateFeb 17

Description

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5hp/hp_support_assistantbefore 9.11

Patches

Patch: support.hp.com ↗Patch: support.hp.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-g54h-m3xc-x2m4: Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Suppo↗2022-02-17
▶
CVEList
CVE-2020-6920: Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Suppo↗2022-02-16
▶
CVE-2020-6920 — HP Support Assistant vulnerability | cvebase