CVE-2017-8984

CVE-2017-8984 affects HPE Intelligent Management Center (iMC) PLAT 7.3 E0506P03. Multiple sources (NVD, CVE lists, CNVD) describe a remote code execution vulnerability in iMC PLAT, enabling an attacker to run commands with SYSTEM/root privileges and potentially write or delete arbitrary files. CV...

CVE-2017-5794

A Remote Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2017-12515

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-8961

The CVE-2017-8961 issue affects HPE Intelligent Management Center (IMC) PLAT versions around 7.3 (E0504P02 and related builds), where a directory traversal flaw in the flexFileUpload/FileUploadServlet path handling can enable remote code execution. The root cause is lack of proper validation of u...

CVE-2017-12534

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12540

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

CVE-2017-12516

CVE-2017-12516 is a Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504), allowing code execution via specific iMC components. The issue is documented as being fixed in PLAT v7.3 (E0506) or later. Connected advisories (ZDI-17-671) describe an authenticat...

CVE-2017-12521

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2018-03952)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability...

HPE iMC dbman RestoreDBase Unauthenticated Remote Command Execution Exploit

This Metasploit module exploits a remote command execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center before version 7.3 E0504P04. The dbman service allows unauthenticated remote users to restore a user-specified database OpCode 10007, however the database connectio...

HPE iMC - dbman 'RestoreDBase' Remote Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HPE iMC dbman RestoreDBase Unauthenticated RCE', 'Description' = %q This module exploits a remote command execution vulnerablity in Hewlett Packa...

HP iMC Plat 7.2 Remote Code Execution

!/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10008 Command Injection RCE Date: 11-29-2017 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HP iMC Plat 7.2 - Remote Code Execution Exploit (2)

Exploit for windows platform in category remote exploits !/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10008 Command Injection RCE Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HP iMC Plat 7.2 - Remote Code Execution Exploit

Exploit for windows platform in category remote exploits !/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10007 Command Injection RCE Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HP iMC Plat 7.2 - Remote Code Execution (2)

HP iMC Plat 7.2 - Remote Code Execution 2 !/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10008 Command Injection RCE Date: 11-29-2017 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HP iMC Plat 7.2 - Remote Code Execution (2)

!/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10008 Command Injection RCE Date: 11-29-2017 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

HP iMC Plat 7.2 - Remote Code Execution

!/opt/local/bin/python2.7 Exploit Title: HP iMC Plat 7.2 dbman Opcode 10007 Command Injection RCE Date: 11-28-2017 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.hpe.com Software Link:...

CVE-2017-5791

The doFilter method in UrlAccessController in HPE Intelligent Management Center iMC PLAT 7.2 E0403P06 allows remote bypass of authentication via unspecified strings in a URI...

CVE-2017-5791

CVE-2017-5791 affects Hewlett Packard Enterprise Intelligent Management Center (IMC/iMC) PLAT 7.2 E0403P06. The vulnerability resides in the UrlAccessController.doFilter method, where crafted URIs containing specific strings can bypass authentication remotely. Impact described in connected source...

CVE-2017-5791

The doFilter method in UrlAccessController in HPE Intelligent Management Center iMC PLAT 7.2 E0403P06 allows remote bypass of authentication via unspecified strings in a URI...