PT-2014-8327 · Hewlett Packard · Hp Helion Cloud Development Platform

Published 2014-11-14 · Updated 2017-09-08 · CVE-2014-7878

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Helion Cloud Development Platform version 1.0

Description The issue allows remote attackers to execute arbitrary code by leveraging the same security keys used across different customers' installations when a virtual machine is derived from the Seed Node image.

Recommendations For HP Helion Cloud Development Platform version 1.0, consider regenerating and using unique security keys for each customer's installation to prevent the exploitation of this issue.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2014-7878

Affected Products

Hp Helion Cloud Development Platform

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-7878 · Security Note
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04500238 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98636 · Note