PT-2017-13413 · Hewlett Packard · Hpe Connected Backup

Lappsec + 1 · Published 2017-12-05 · Updated 2019-10-03 · CVE-2017-14355

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HPE Connected Backup versions 8.6 through 8.8.6

Description A potential security issue has been identified that could be exploited locally to allow escalation of privilege.

Recommendations For HPE Connected Backup versions 8.6 through 8.8.6, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2017-14355

Affected Products

Hpe Connected Backup

References · 6

• 🔥 https://exploit-db.com/exploits/43857 · Exploit
• https://osv.dev/vulnerability/CVE-2017-14355 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14355 · Security Note
• https://softwaresupport.hpe.com/document/-/facetsearch/document/KM02987868 · Note
• http://securityfocus.com/bid/101270 · Note
• http://seclists.org/bugtraq/2017/Oct/23 · Note