CVE-2016-4379 | BDVDB-2026-77917 Detail

Description#

The TLS implementation in HPE Integrated Lights-Out 3 (aka iLO3) firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12016-09-08Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.