Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2018-7069: HPE CentralView Fraud Risk Management allows remote file access

CVE-2018-7069 · published 8 years ago

Summary

The CentralView Fraud Risk Management software before version 6.1 can be accessed over the network without any login, letting anyone view or download files. This could expose sensitive business data. Apply the provided HF16 update or upgrade to version 6.1 or later to close the gap.

What to do

Update hp centralview_fraud_risk_management to version 6.1 or later.

Affected software

Vendor	Product	Affected versions
hp	centralview_fraud_risk_management	< 6.1 `cpe:2.3:a:hp:centralview_fraud_risk_management::::::::`

Original advisory text

HPE has identified a remote unauthenticated access to files vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subs...

References

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpe... Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Exploitation

2% chance of attack within 30 days

Type

CWE-287Improper Authentication

Timeline

Published6 Aug 2018

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2018-7069 · NVD

Track software like this

Free during beta