TI-2020-05589 Aliases CVE-2020-6919 GHSA-3mwp-qw92-xgwg

Potential security vulnerabilities including compromise of integrity, and allowed…

LOW 38Published 2022-02-16 · Updated 2026-10-08

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00865 58th percentileScored 2026-11-07

Fix Fixed HP Support Assistant: 9.11

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	HP Support Assistant	before 9.11	9.11	Patch available	CNA

HP Support Assistant Vendor— Affected before 9.11 Fixed in 9.11 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:hp:support_assistant::::::::	before 9.11	Vulnerable	Hewlett Packard Enterprise

cpe:2.3:a:hp:support_assistant:*:*:*:*:*:*:*:* Versions before 9.11 Vulnerable ·Hewlett Packard Enterprise

Remediation

Fix · CNA HP Support Assistant Fixed in 9.11

Timeline

2026-10-02 Threatist record created from CVE-2020-6919
2026-10-03 Alias added: GHSA-3mwp-qw92-xgwg
2026-10-08 CISA SSVC decision points changed

References

Patch 1

https://support.hp.com/us-en/document/ish_5585999-5586023-16

Advisory 1

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0030/MNDT-2022-0030.md

TI-2016-02040 HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors. CVSS 3.0CRITICAL 9.8
TI-2022-18021 Uncontrolled search path in Hewlett Packard Enterprise HP Support Assistant CVSS 3.1HIGH 7.8
TI-2020-05592 Potential security vulnerabilities including compromise of integrity, and allowed… CVSS 3.1HIGH 7.8
TI-2020-05591 Potential security vulnerabilities including compromise of integrity, and allowed… CVSS 3.1HIGH 7.8
TI-2020-05588 Potential security vulnerabilities including compromise of integrity, and allowed… CVSS 3.1HIGH 7.8
TI-2020-05587 Potential security vulnerabilities including compromise of integrity, and allowed… CVSS 3.1HIGH 7.8

See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences