HPE Intelligent Management Center dbman BackupZipFile Command Injection (CVE-2017-5820)

A command injection vulnerability exist in the dbman component of HPE Intelligent Management Center. The vulnerability is due to missing validation of user-provided parameters when handling BackupZipFile commands. A remote, unauthenticated attacker can exploit the vulnerability by sending a...

HPE Network Node Manager i (NNMi) Multiple Vulnerabilities (HPESBGN03762)

The version of HPE Network Node Manager i NNMi installed on the remote Windows host is 10.0x prior to 10.00 Patch 5, 10.1x prior to 10.10 Patch 4, or 10.2x prior to 10.20 Patch 3. It is, therefore, affected by multiple vulnerabilities that allow an unauthenticated, remote attacker to execute...

HPE Network Node Manager i (NNMi) Multiple Vulnerabilities (HPESBGN03762)

The version of HPE Network Node Manager i NNMi installed on the remote Linux host is 10.0x prior to 10.00 Patch 5, 10.1x prior to 10.10 Patch 4, or 10.2x prior to 10.20 Patch 3. It is, therefore, affected by multiple vulnerabilities that allow an unauthenticated, remote attacker to execute...

PT-2017-3556

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center iMC PLAT version 7.2 Description: The issue exists due to insufficient validation of a user-supplied string before it is used to execute a system call. This can allow a remote attacker to execute arbitrary...

PT-2017-3554

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version 7.2 Description: The issue exists due to insufficient input validation in the dbman service of the HPE Intelligent Management Center PLAT platform. This allows a remote attacker to execute...

PT-2017-3623

Name of the Vulnerable Software and Affected Versions: HPE Network Node Manager i NNMi versions v10.0x through v10.2x Description: The issue is related to security mechanism weaknesses in HPE Network Node Manager i NNMi. It may allow a remote attacker to perform cross-site scripting attacks XSS,...

HPE Intelligent Management Center dbman RestartDB Command Injection (CVE-2017-5816)

A command injection vulnerability exists in the dbman component of HPE Intelligent Management Center. The vulnerability is due to improper validation of the dbInstance parameter when handling RestartDB commands. A remote, unauthenticated attacker can exploit the vulnerability by sending a...

HPE Intelligent Management Center dbman RestoreZipFile Command Injection (CVE-2017-5821)

A command injection vulnerability exists in the dbman component of HPE Intelligent Management Center. The vulnerability is due to missing validation of user-provided parameters when handling RestoreZipFile commands. A remote, unauthenticated attacker can exploit the vulnerability by sending a...

CVE-2016-4383

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change...

CVE-2016-4383

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change...

CVE-2016-4383

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change...

Authentication flaw

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change...

UBUNTU-CVE-2016-4383

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change...

CVE-2016-4383

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change...

CVE-2016-4383

CVE-2016-4383 affects the OpenStack image service component in HPE Helion OpenStack Glance. The vulnerability lies in the glance-manage database, where deleted image IDs can be reassigned. This can allow remote authenticated users to cause other users to boot into a modified image without notific...

CVE-2016-4383

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change...

PT-2017-3522

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version Plat 7.3 E0504P4 and earlier Description: A remote code execution issue was discovered, related to the use of an uninitialized pointer in the dbman service of HPE Intelligent Management Center...

PT-2017-8485

Name of the Vulnerable Software and Affected Versions HPE Helion Openstack Glance affected versions not specified Description The issue allows remote authenticated users to cause other users to boot into a modified image without notification of the change by reassigning deleted image ids...

CVE-2016-4383: Improper Access Control

The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified image without notification of the change...

HPE Intelligent Management Center dbman FileTrans Arbitrary File Write (CVE-2017-5822)

An arbitrary file write vulnerability has been reported in the dbman component of HPE Intelligent Management Center. The vulnerability is due to lack of authentication on FileTrans commands, used to transfer files to the host running dbman. A remote, unauthenticated attacker can exploit the...