« Back to list

CVE-2015-7863

Status: ModifiedMedium (5)—

The default configuration of Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 enables a remote Notify capability without the Extended Notify Security features, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Accelerite — Radia Client Automation

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2015-7863",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-10-19T18:59:10.397",
  "references": [
    {
      "url": "http://www.securitytracker.com/id/1033862",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id/1033862",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-254"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The default configuration of Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 enables a remote Notify capability without the Extended Notify Security features, which might allow remote attackers to bypass intended access restrictions via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "La configuración por defecto de Persistent Accelerite Radia Client Automation (anteriormente HP Client Automation) 7.9 hasta la versión 9.1 en versiones anteriores a 2015-02-19 habilita una capacidad Notify remota sin las características Extended Notify Security, lo que podría permitir a atacantes remotos eludir las restricciones destinadas al acceso a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:33:17.353",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:accelerite:radia_client_automation:7.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9902293-6C38-4386-A8FA-E7631E0C11B2"
            },
            {
              "criteria": "cpe:2.3:a:accelerite:radia_client_automation:8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7184E653-B224-4555-96E3-C1FCB82C344D"
            },
            {
              "criteria": "cpe:2.3:a:accelerite:radia_client_automation:9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D0D12E5-2639-42D2-B477-90A06593568F"
            },
            {
              "criteria": "cpe:2.3:a:accelerite:radia_client_automation:9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "790AA8D9-FA95-4CBE-AC48-C82AD2D39C58"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}