PT-2017-13179 · Hewlett Packard · Hpe Bsm Platform Application Performance Management System Health

Published 2017-09-07 · Updated 2017-10-05 · CVE-2017-13985

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE BSM Platform Application Performance Management System Health versions 9.26, 9.30, 9.40

Description The issue allows remote users to traverse directories, leading to the disclosure of information due to an authentication vulnerability.

Recommendations For versions 9.26, 9.30, and 9.40, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2017-13985

ZDI-17-721

Affected Products

Hpe Bsm Platform Application Performance Management System Health

References · 6

• https://osv.dev/vulnerability/CVE-2017-13985 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13985 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-17-721 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-17-721 · Note
• https://auscert.org.au/bulletins/52154 · Note
• https://softwaresupport.hpe.com/km/KM02942065 · Note