PT-2018-17897 · Hewlett Packard · Hpe Intelligent Management Center Plat

Published 2018-08-06 · Updated 2018-10-05 · CVE-2018-7092

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center Platform (IMC Plat) version 7.3 E0506P09

Description A potential security issue has been identified that could be remotely exploited, allowing for remote directory traversal and leading to arbitrary file deletion.

Recommendations For HPE Intelligent Management Center Platform (IMC Plat) version 7.3 E0506P09, update to a version that fixes this issue to prevent remote directory traversal and arbitrary file deletion.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-7092

ZDI-18-955

Affected Products

Hpe Intelligent Management Center Plat

References · 5

• https://zerodayinitiative.com/advisories/ZDI-18-955 · Security Note
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03872en_us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-7092 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-7092 · Security Note
• http://securitytracker.com/id/1041412 · Note