CVE-2016-2000

Critical

Published: 05/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

HPE Asset Manager versions 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback version 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

Risk Assessment

Attackers can exploit this vulnerability to execute remote code, potentially leading to system takeover and data leakage.

Recommendation

It is recommended to upgrade to the latest version of HPE Asset Manager and Asset Manager CloudSystem Chargeback to mitigate this vulnerability.

Original NVD description (English source)

HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.