PT-2018-8278 · Hewlett Packard · Hp Business Process Monitor

Published 2018-02-15 · Updated 2018-03-15 · CVE-2017-5801

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE Business Process Monitor versions v09.2x through v09.30

Description A Remote Unauthorized Access to Data issue was discovered, allowing unauthorized access to data.

Recommendations For HPE Business Process Monitor versions v09.2x through v09.30, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-5801

Affected Products

Hp Business Process Monitor

References · 5

• https://osv.dev/vulnerability/CVE-2017-5801 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5801 · Security Note
• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03727en_us · Vendor Advisory
• http://securitytracker.com/id/1038176 · Note
• http://securityfocus.com/bid/97386 · Note