CVE-2020-7152

A faultparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7152

A faultparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

CVE-2020-7152

HPE Intelligent Management Center (iMC) before PLAT 7.3 (E0705P07) is vulnerable to a faultParasSet expression language injection that leads to remote code execution. The root cause is improper handling/validation of the beanName parameter passed to faultParasSet.xhtml, allowing an attacker to ex...