CVEvulnerability

CVE-2019-12000

6.6 MEDIUM Published 2020-07-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.6 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.4 MEDIUM — AV:N/AC:M/Au:M/C:P/I:P/A:P
Weaknesses
CWE-295

Description

HPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU prior to version 3.2 when HTTPS is used between the USSD and an external USSD service logic application. Update to version 3.2 and update the HTTPS configuration as described in the HPE MSE Messaging Gateway Configuration and Operations Guide.

Affected configurations

• hp mse msg gw application e-ltu (< 3.2)

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References