PT-2018-17907 · Hewlett Packard · Hpe Intelligent Management Center

Publicado 2018-08-31 · Atualizado 2018-12-20 · CVE-2018-7102

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center (iMC) version PLAT E0506P09

Description A security issue in HPE Intelligent Management Center (iMC) allows remote arbitrary file modification via directory traversal. This can be exploited remotely. The createFabricAutoCfgFile function is involved in this issue.

Recommendations For HPE Intelligent Management Center (iMC) version PLAT E0506P09, consider restricting access to the createFabricAutoCfgFile function until a patch is available to prevent remote arbitrary file modification.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-7102

ZDI-18-966

Produtos afetados

Hpe Intelligent Management Center

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-7102 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-7102 · Aviso do Fabricante
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03887en_us · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-18-966 · Nota de Segurança