PT-2017-13179 · Hewlett Packard · Hpe Bsm Platform Application Performance Management System Health

Publicado 2017-09-07 · Atualizado 2017-10-05 · CVE-2017-13985

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE BSM Platform Application Performance Management System Health versions 9.26, 9.30, 9.40

Description The issue allows remote users to traverse directories, leading to the disclosure of information due to an authentication vulnerability.

Recommendations For versions 9.26, 9.30, and 9.40, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2017-13985

ZDI-17-721

Produtos afetados

Hpe Bsm Platform Application Performance Management System Health

Referências · 6

• https://osv.dev/vulnerability/CVE-2017-13985 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-13985 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-17-721 · Nota
• https://auscert.org.au/bulletins/52154 · Nota
• https://zerodayinitiative.com/advisories/ZDI-17-721 · Nota de Segurança
• https://softwaresupport.hpe.com/km/KM02942065 · Nota