PT-2014-8327 · Hewlett Packard · Hp Helion Cloud Development Platform

Publicado 2014-11-14 · Atualizado 2017-09-08 · CVE-2014-7878

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Helion Cloud Development Platform version 1.0

Description The issue allows remote attackers to execute arbitrary code by leveraging the same security keys used across different customers' installations when a virtual machine is derived from the Seed Node image.

Recommendations For HP Helion Cloud Development Platform version 1.0, consider regenerating and using unique security keys for each customer's installation to prevent the exploitation of this issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2014-7878

Produtos afetados

Hp Helion Cloud Development Platform

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/98636 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-7878 · Nota de Segurança
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04500238 · Aviso do Fabricante