PT-2018-8476 · Hewlett Packard · Hpe Intelligent Management Center (Imc) Plat

Published 2018-01-25 · Updated 2018-02-26 · CVE-2017-8980

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2

Description A Remote Disclosure of Information issue was discovered, potentially allowing unauthorized access to sensitive information. The issue is related to the operatorOnlineList contentOnly Information Disclosure.

Recommendations For HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-8980

ZDI-18-136

Affected Products

Hpe Intelligent Management Center (Imc) Plat

References · 5

• https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03810en_us · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-8980 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-8980 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-18-136 · Security Note
• http://securityfocus.com/bid/102925 · Note