Lucene search

HpeCVE-2017-12555

HistoryFeb 15, 2018 - 10:29 p.m.

CVE-2017-12555

2018-02-1522:29:04

CWE-200

hpe

web.nvd.nist.gov

cve-2017-12555

remote arbitrary file download

disclosure vulnerability

hpe imc som 7.3 e0501

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

40.2%

JSON

A remote arbitrary file download and disclosure of information vulnerability in HPE Intelligent Management Center (iMC) Service Operation Management (SOM) version IMC SOM 7.3 E0501 was found.

Affected configurations

Nvd

Node

hpintelligent_management_centerMatch7.3e0501

VendorProductVersionCPE
hpintelligent_management_center7.3cpe:2.3:a:hp:intelligent_management_center:7.3:e0501:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	intelligent_management_center	7.3	cpe:2.3:a:hp:intelligent_management_center:7.3:e0501::::::

CNA Affected

[
  {
    "product": "Intelligent Management Center (iMC) Service Operation Management (SOM)",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "IMC SOM 7.3 E0501"
      }
    ]
  }
]

References

www.securitytracker.com/id/1039496

support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03776en_us

www.tenable.com/security/research/tra-2017-27

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

40.2%

JSON

Related for CVE-2017-12555