PT-2018-8281 · Hewlett Packard · Hpe Data Protector

Publicado 2018-02-15 · Atualizado 2018-03-07 · CVE-2017-5809

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE Data Protector versions prior to 8.17 HPE Data Protector versions prior to 9.09

Description A Remote Arbitrary Code Execution issue was discovered.

Recommendations For versions prior to 8.17, update to version 8.17 or later. For versions prior to 9.09, update to version 9.09 or later.

Correção

Enumeração de Fraquezas

CWE-275

Identificadores relacionados

CVE-2017-5809

Produtos afetados

Hpe Data Protector

Referências · 5

• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us · Aviso do Fabricante
• http://securityfocus.com/bid/100088 · Nota
• https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-setuid-bit-set-omniresolve-2017-08-02.pdf · Nota
• https://osv.dev/vulnerability/CVE-2017-5809 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-5809 · Nota de Segurança