PT-2018-8281 · Hewlett Packard · Hpe Data Protector

Published 2018-02-15 · Updated 2018-03-07 · CVE-2017-5809

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE Data Protector versions prior to 8.17 HPE Data Protector versions prior to 9.09

Description A Remote Arbitrary Code Execution issue was discovered.

Recommendations For versions prior to 8.17, update to version 8.17 or later. For versions prior to 9.09, update to version 9.09 or later.

Fix

Weakness Enumeration

CWE-275

Related Identifiers

CVE-2017-5809

Affected Products

Hpe Data Protector

References · 5

• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbgn03732en_us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-5809 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5809 · Security Note
• http://securityfocus.com/bid/100088 · Note
• https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-setuid-bit-set-omniresolve-2017-08-02.pdf · Note