Lucene search

HpeCVE-2017-8985

HistoryFeb 15, 2018 - 10:29 p.m.

CVE-2017-8985

2018-02-1522:29:09

CWE-200

hpe

web.nvd.nist.gov

cve-2017-8985

nvd

hpe xp storage

hitachi global link manager

hglm

information disclosure

vulnerability

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

4.9

Confidence

High

EPSS

Percentile

5.1%

JSON

HPE XP Storage using Hitachi Global Link Manager (HGLM) has a local authenticated information disclosure vulnerability in HGLM version HGLM 6.3.0-00 to 8.5.2-00.

Affected configurations

Nvd

Node

hpxp_storage_hitachi_global_link_managerRange6.3.0-00–8.5.2-00

VendorProductVersionCPE
hpxp_storage_hitachi_global_link_manager*cpe:2.3:a:hp:xp_storage_hitachi_global_link_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	xp_storage_hitachi_global_link_manager	*	cpe:2.3:a:hp:xp_storage_hitachi_global_link_manager::::::::

CNA Affected

[
  {
    "product": "XP Storage using HGLM",
    "vendor": "Hewlett Packard Enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "6.3.0-00 to 8.5.2-00"
      }
    ]
  }
]

References

support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03819en_us

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

AI Score

4.9

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2017-8985