PT-2017-16693 · Hewlett Packard · Hpe Network Automation

Publicado 2017-05-11 · Atualizado 2018-03-07 · CVE-2017-5811

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE Network Automation versions 9.1x through 10.2x

Description A remote code execution vulnerability was found in HPE Network Automation. The issue allows for directory traversal and information disclosure through the TrueControl Management Engine Service FileServlet.

Recommendations For versions 9.1x through 10.2x, update to a version that contains a fix for this issue, as the current versions are affected by the remote code execution vulnerability.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-5811

ZDI-17-330

Produtos afetados

Hpe Network Automation

Referências · 6

• http://securityfocus.com/bid/98331 · Nota
• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03740en_us · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-5811 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-5811 · Aviso do Fabricante
• http://securitytracker.com/id/1038407 · Nota
• https://zerodayinitiative.com/advisories/ZDI-17-330 · Nota de Segurança