Lucene search

HpeCVE-2017-8968

HistoryAug 06, 2018 - 8:29 p.m.

CVE-2017-8968

2018-08-0620:29:00

hpe

web.nvd.nist.gov

cve-2017-8968

remote execution

arbitrary code

vulnerability

hpe

restful interface tool

ilorest

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

58.2%

JSON

A remote execution of arbitrary code vulnerability has been identified in HPE RESTful Interface Tool 1.5, 2.0 (hprest-1.5-79.x86_64.rpm, ilorest-2.0-403.x86_64.rpm). The issue is resolved in iLOREST v2.1 or subsequent versions.

Affected configurations

Nvd

Node

hprestful_interface_toolMatch1.5

hprestful_interface_toolMatch2.0

VendorProductVersionCPE
hprestful_interface_tool1.5cpe:2.3:a:hp:restful_interface_tool:1.5:*:*:*:*:*:*:*
hprestful_interface_tool2.0cpe:2.3:a:hp:restful_interface_tool:2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	restful_interface_tool	1.5	cpe:2.3:a:hp:restful_interface_tool:1.5:::::::*
hp	restful_interface_tool	2.0	cpe:2.3:a:hp:restful_interface_tool:2.0:::::::*

CNA Affected

[
  {
    "product": "HPE RESTful Interface Tool",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "v1.5, v2.0"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03796en_us

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

58.2%

JSON

Related for CVE-2017-8968