CVE-2015-2802

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-04 · updated 2026-06-17
Weakness: CWE-200

Description

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem Chargeback 9.40, which could let a remote malicious user obtain sensitive information. This is the TLS vulnerability known as the RC4 cipher Bar Mitzvah vulnerability.

Affected products

HP Asset Manager: 9.30, 9.31, 9.32, 9.40, 9.41, 9.50
HP Asset Manager Cloudsystem Chargeback: 9.40
Hewlett Packard Enterprise SiteScope: from 11.20 through 11.24; 11.30

References

http://marc.info/?l=bugtraq&m=143455780010289&w=2
http://marc.info/?l=bugtraq&m=143629738517220&w=2
http://www.securityfocus.com/bid/75258
https://packetstormsecurity.com/files/cve/CVE-2015-2802
https://securitytracker.com/id/1032599
http://marc.info/?l=bugtraq&m=143455780010289&w=2
http://marc.info/?l=bugtraq&m=143629738517220&w=2
http://www.securityfocus.com/bid/75258
https://packetstormsecurity.com/files/cve/CVE-2015-2802
https://securitytracker.com/id/1032599

Get alerted when CVE-2015-2802 or the next vulnerability affects your stack