CVE Catalog
CVE-2016-2002
CriticalSummary
The validateAdminConfig handler in the Analytics Management Console in HPE Vertica before version 7.0.2.12, 7.1.2-12, and 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter.
Risk Assessment
Attackers can exploit this vulnerability to execute arbitrary commands remotely, potentially leading to system compromise.
Recommendation
It is recommended to update HPE Vertica to the latest version to mitigate this vulnerability.
Original NVD description (English source)
The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417.