PT-2018-17897 · Hewlett Packard · Hpe Intelligent Management Center Plat

Publicado 2018-08-06 · Atualizado 2018-10-05 · CVE-2018-7092

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center Platform (IMC Plat) version 7.3 E0506P09

Description A potential security issue has been identified that could be remotely exploited, allowing for remote directory traversal and leading to arbitrary file deletion.

Recommendations For HPE Intelligent Management Center Platform (IMC Plat) version 7.3 E0506P09, update to a version that fixes this issue to prevent remote directory traversal and arbitrary file deletion.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-7092

ZDI-18-955

Produtos afetados

Hpe Intelligent Management Center Plat

Referências · 5

• https://zerodayinitiative.com/advisories/ZDI-18-955 · Nota de Segurança
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03872en_us · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-7092 · Aviso do Fabricante
• http://securitytracker.com/id/1041412 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-7092 · Nota de Segurança