CVE-2020-7145

A chooseperfview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7145

CVE-2020-7145 affects HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 (E0705P07). The vulnerability is a choosePerfView expression language injection in the beanName parameter handled by choosePerfView.xhtml, enabling remote code execution. Exploitation details in the ZDI advisory i...

Hewlett Packard Enterprise Intelligent Management Center choosePerfView Expression Language Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...