CVE-2019-12000 - CVE House
Back to Database
Status published Medium CVE-2019-12000

HPE has found a potential Remote Access Restriction Bypass in...

Vulnerability Description

HPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU prior to version 3.2 when HTTPS is used between the USSD and an external USSD service logic application. Update to version 3.2 and update the HTTPS configuration as described in the HPE MSE Messaging Gateway Configuration and Operations Guide.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-12000

Credits & Attribution

No credits recorded in the NVD database.

References

More from HPE

View All →
CVE-2023-50271
HP-UX System Management Homepage, Disclosure of Information
High 7.2
CVE-2023-28083
Potential Cross-Site scripting vulnerability in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4).
High 8.3
CVE-2022-37931
A vulnerability in NetBatch-Plus software allows unauthorized access to the application
High 7.3
CVE-2020-7135
A potential security vulnerability has been identified in the disk...
High 7.8
CVE-2019-11998
HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities...
Medium 5.5

Affected Vendor

Affected Software

HPE MSE Msg Gw application E-LTU
Vulnerable Versions:
prior to version 3.2

Timeline

Official Publish: July 17th, 2020
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.