The vulnerability of the System Health service configuration in software for IT service management and intelligent monitoring of application performance management allows attackers to bypass authentication procedures and arbitrarily delete or upload files.

The vulnerability of the System Health service configuration in software for IT service management and intelligent monitoring of application performance management is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass...

CVE-2017-13982

A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files...

CVE-2017-14350

A potential security vulnerability has been identified in HPE Application Performance Management BSM Platform versions 9.26, 9.30, 9.40. The vulnerability could be remotely exploited to allow code execution...

CVE-2017-13985: Improper Limitation of a Pathname to a Restricted Directory

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to traverse directory leading to disclosure of information...

CVE-2017-13984: Improper Authentication

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to delete arbitrary files via servlet directory traversal...

CVE-2017-13983: Improper Authentication

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to bypass authentication...

CVE-2017-13982: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to upload unrestricted files...

CVE-2017-14350: Missing Authentication for Critical Function

A potential security vulnerability has been identified in HPE Application Performance Management BSM Platform versions 9.26, 9.30, 9.40. The vulnerability could be remotely exploited to allow code execution...

CVE-2017-13982

HPE BSM Platform Application Performance Management System Health suffers a directory traversal/unrestricted file upload flaw in versions 9.26, 9.30, and 9.40. The root cause involves the UploadManager servlet failing to validate user-supplied paths, enabling an attacker to upload arbitrary files...

HPE Application Performance Management Platform Remote Code Execution Vulnerability

HPE Application Performance Management BSM Platform is a set of application performance management system of the American Hewlett Packard Enterprise HPE company's BSM platform. A security vulnerability exists in HPE BSM Platform versions 9.26, 9.30, and 9.40. A remote attacker could exploit the...

Hewlett Packard Enterprise Application Performance Management Staging Data Replicator hpbsmsdr Missing Authentication for Critical Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Application Performance Management Staging Data Replicator. The specific flaw exists within the hpbsmsdr web service, which listens on TCP port 29921 by default. The...

HPE BSM Platform Application Performance Management System Health Path Traversal Vulnerability

HPE BSM Platform Application Performance Management System Health is a suite of application performance management systems for the BSM platform from Hewlett Packard Enterprise HPE. A path traversal vulnerability exists in HPE BSM Platform Application Performance Management System Health versions...

HPE BSM Platform Application Performance Management System Health Path Traversal Vulnerability (CNVD-2017-33007)

HPE BSM Platform Application Performance Management System Health is a suite of application performance management systems for the BSM platform from Hewlett Packard Enterprise HPE. A path traversal vulnerability exists in HPE BSM Platform Application Performance Management System Health versions...

HPE BSM Platform Application Performance Management System Health Arbitrary File Deletion Vulnerability

HPE BSM Platform Application Performance Management System Health is a suite of application performance management systems for the BSM platform from Hewlett Packard Enterprise HPE. A security vulnerability exists in HPE BSM Platform Application Performance Management System Health versions 9.26,...

Hewlett Packard Enterprise Application Performance Management System Health UploadManager Servlet Directory Traversal Unrestricted File Upload Vulnerability

This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of Hewlett Packard Enterprise Application Performance Management System Health. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed...

Hewlett Packard Enterprise Application Performance Management System Health Authentication Bypass Vulnerability

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Hewlett Packard Enterprise Application Performance Management System Health. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the Syst...

PT-2017-13179

Name of the Vulnerable Software and Affected Versions HPE BSM Platform Application Performance Management System Health versions 9.26, 9.30, 9.40 Description The issue allows remote users to traverse directories, leading to the disclosure of information due to an authentication vulnerability...

PT-2017-13178

Name of the Vulnerable Software and Affected Versions HPE BSM Platform Application Performance Management System Health versions 9.26, 9.30, 9.40 Description The issue allows remote users to delete arbitrary files via servlet directory traversal in the SHExportToExcel Servlet. Recommendations For...

PT-2017-13177

Name of the Vulnerable Software and Affected Versions HPE BSM Platform Application Performance Management System Health versions 9.26, 9.30, 9.40 Description A directory traversal issue allows users to upload unrestricted files, potentially leading to security breaches. Recommendations For versio...

Hewlett Packard Enterprise Application Performance Management System Health Email Servlet Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Hewlett Packard Enterprise Application Performance Management System Health. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be...