CVE-2017-5795

CVE-2017-5795 affects HPE Intelligent Management Center (IMC) PLAT 7.2 E0403P06. The vulnerability resides in FileDownloadServlet, where insufficient validation/sanitization of the fileName parameter allows directory traversal, enabling remote disclosure of arbitrary files. ZDI notes that exploit...

CVE-2017-5795: Exposure of Sensitive Information to an Unauthorized Actor

A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC version PLAT 7.2 E0403P06 was found...