HPE Intelligent Management Center Remote Code Execution (CVE-2017-12491) - Ver2

A remote code execution vulnerability exists in HPE Intelligent Management Center. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2017-12491

CVE-2017-12491 affects HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504); a remote code execution vulnerability arises from insufficient handling of a parameter to saveSelectedDevices via GWT RPC, enabling an attacker to execute arbitrary code on the target. The issue is fixed in PLAT v7.3...

CVE-2017-12491

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

HPE Intelligent Management Center saveSelectedDevices Expression Language Injection (CVE-2017-12491)

An Expression Language injection vulnerability exists in HPE Intelligent Management Center. The vulnerability is due to insufficient handling of a parameter passed to the saveSelectedDevices method through a GWT RPC request. A remote, authenticated attacker can exploit this vulnerability by sendi...