Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2019-11987: HPE Smart Update Manager may let local users gain admin

CVE-2019-11987 · published 7 years ago

Summary

The version of HPE Smart Update Manager released before 8.4 allows someone with access to the computer to increase their privileges to an administrator level. This could let a user perform actions they should not be able to, potentially compromising system security. Upgrade to version 8.4 or later to close the gap.

What to do

Update hpe smart_update_manager to version 8.4 or later.

Affected software

Vendor	Product	Affected versions
hpe	smart_update_manager	< 8.4 `cpe:2.3:a:hpe:smart_update_manager::::::::`

Original advisory text

A security vulnerability in HPE Smart Update Manager (SUM) prior to v8.4 could allow local unauthorized elevation of privilege.

References

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpe... Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.8 High

Exploitation

<1% chance of attack within 30 days

Timeline

Published5 Jun 2019

Updated31 Oct 2026

First seen29 Sep 2026

Sources

CVE-2019-11987 · NVD

Track software like this

Free during beta