Lucene search

HpeCVE-2017-8978

HistoryFeb 15, 2018 - 10:29 p.m.

CVE-2017-8978

2018-02-1522:29:09

CWE-200

hpe

web.nvd.nist.gov

vulnerability

information disclosure

hpe icewall

nvd

cve-2017-8978

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

CVSS3

4.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

19.0%

JSON

A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found.

Affected configurations

Nvd

Node

hpicewall_mcrpMatch4.0

hpicewall_mfaMatch4.0enterprise

hpicewall_mfaMatch4.0standard

hpicewall_ssoMatch10.0p8dfw

hpicewall_ssoMatch11.0

VendorProductVersionCPE
hpicewall_mcrp4.0cpe:2.3:a:hp:icewall_mcrp:4.0:*:*:*:*:*:*:*
hpicewall_mfa4.0cpe:2.3:a:hp:icewall_mfa:4.0:*:*:*:enterprise:*:*:*
hpicewall_mfa4.0cpe:2.3:a:hp:icewall_mfa:4.0:*:*:*:standard:*:*:*
hpicewall_sso10.0cpe:2.3:a:hp:icewall_sso:10.0:p8:*:*:dfw:*:*:*
hpicewall_sso11.0cpe:2.3:a:hp:icewall_sso:11.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	icewall_mcrp	4.0	cpe:2.3:a:hp:icewall_mcrp:4.0:::::::*
hp	icewall_mfa	4.0	cpe:2.3:a:hp:icewall_mfa:4.0::::enterprise:::
hp	icewall_mfa	4.0	cpe:2.3:a:hp:icewall_mfa:4.0::::standard:::
hp	icewall_sso	10.0	cpe:2.3:a:hp:icewall_sso:10.0:p8:::dfw:::*
hp	icewall_sso	11.0	cpe:2.3:a:hp:icewall_sso:11.0:::::::*

CNA Affected

[
  {
    "product": "IceWall Products",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "MFA 4.0 Proxy"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbmu03806en_us

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

CVSS3

4.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

19.0%

JSON

Related for CVE-2017-8978