CVE-2021-25140

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

CVE-2021-25139

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

Stack overflow

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

CVE-2021-25140

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

CVE-2021-25140

The CVE-2021-25140 entry concerns HPE Moonshot Provisioning Manager v1.20, an appliance used in VMware/Hyper‑V environments to configure an HPE Moonshot 1500 chassis. The vulnerability arises from a directory traversal in user-supplied input to the khuploadfile.cgi CGI ELF, which could enable rem...

CVE-2021-25139

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

CVE-2021-25139

The CVE-2021-25139 case involves HPE Moonshot Provisioning Manager v1.20, installed in VM- or Hyper‑V environments to configure Moonshot 1500 chassis. The issue is a stack-based buffer overflow triggered by user-supplied input to the khuploadfile.cgi CGI ELF, which could lead to Remote Code Execu...

HPE Moonshot Provisioning Manager Buffer Error Vulnerability

A buffer error vulnerability in HPE Moonshot Provisioning Manager versions prior to V1.20 can be exploited remotely by an unauthenticated user to cause a stack-based buffer overflow using user-supplied input to the server, which in turn can lead to remote code execution, denial of service, and/or...

HPE Moonshot Provisioning Manager Path Traversal Vulnerability

A path traversal vulnerability in HPE Moonshot Provisioning Manager prior to v1.20, which stems from incorrectly handling user input that results in traversing a directory triggering khuploadfile.cgi, can be exploited by an attacker to cause remote code execution, denial of service, and/or...

PT-2021-14540 · Sap · Sap Software Provisioning Manager +1

Name of the Vulnerable Software and Affected Versions: SAP Software Provisioning Manager version 1.0 SAP NetWeaver Master Data Management Server version 7.1 Description: The issue allows an authenticated attacker to perform various security attacks due to the lack of an option to set a password...

SAP NetWeaver Master Data Management 访问控制错误漏洞

SAP NetWeaver Master Data Management SAP MDM is a software from SAP Germany for managing inter-enterprise collaboration. A security vulnerability exists in SAP Software Provisioning Manager that stems from the failure to set a password option during installation, which can be exploited by an...

(0Day) Hewlett Packard Enterprise Moonshot Provisioning Manager khuploadfile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of Hewlett Packard Enterprise Moonshot Provisioning Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the khuploadfile.cgi binary. The issue results...

(0Day) Hewlett Packard Enterprise Moonshot Provisioning Manager khuploadfile Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Moonshot Provisioning Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the khuploadfile.cgi binary. The issue results...

HPE Moonshot Provisioning Manager Appliance Directory Traversal (CVE-2017-8976)

A directory traversal vulnerability exists in HPE Moonshot Provisioning Manager Appliance. The vulnerability is due to an input validation flaw when processing parameter. Successful exploitation could result in arbitrary code execution...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM Systems Director Editions

Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by IBM Systems Director and Tivoli Provisioning Manager for OS Deployment which are shipped as components of IBM Systems Director Editions. Information aboutthe security vulnerability affectin...

Security Bulletin: Multiple vulnerabilities in IBM SDK Java Technology Edition affect IBM Systems Director Editions

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition that affects Tivoli Common Reporting, Tivoli Provisioning Manager for OS deployment and IBM Systems Director which are shipped as part of IBM Systems Director Editions. These issues were disclosed as part of the IBM Jav...

Security Bulletin: Multiple Security vulnerabilities have been identified in Tivoli Provisioning Manager for OS Deployment and Tivoli Common Reporting with IBM System Director Editions.

Summary Tivoli Provisioning Manager for OS Deployment and Tivoli Common Reporting are shipped as components of IBM Systems Director Editions. Information about the security vulnerability affecting these components has been published in the security bulletin. Vulnerability Details Summary Tivoli...

Security Bulletin: Multiple Security vulnerabilities have been identified in Tivoli Provisioning Manager for OS Deployment, IBM System Director and Tivoli Common Reporting with IBM System Director Editions. (CVE-2014-3513,CVE-2014-3567 and CVE-2014-3568)

Summary Tivoli Provisioning Manager for OS Deployment, IBM System Director and Tivoli Common Reporting are shipped as components of IBM System Director Editions. Information about the security vulnerabilities affecting these components has been published in thesecurity bulletins listed below...

Security Bulletin: Multiple Security vulnerabilities have been identified in Tivoli Provisioning Manager for OS Deployment which is shipped with IBM Systems Director Editions.(CVE-2015-0159,CVE-2014-6221)

Summary Tivoli Provisioning Manager for OS Deployment is shipped as a component of IBM Systems Director Editions. Information about the security vulnerability affecting these components has been published in the security bulletin. Vulnerability Details Abstract Tivoli Provisioning Manager for OS...

Security Bulletin: A security vulnerability has been identified in Tivoli Provisioning Manager for OS Deployment, IBM Tivoli Monitoring, IBM System Director and Tivoli Common Reporting shipped with IBM System Director Editions. (CVE-2014-3566)

Summary Tivoli Provisioning Manager for OS Deployment, IBM Tivoli Monitoring, IBM System Director and Tivoli Common Reporting are shipped as components of IBM System Director Editions. Information about the security vulnerability affecting these components has been published in the security...