CVE-2017-8949

CVE-2017-8949 affects HPE SiteScope 11.2x and 11.3x, linked to a hard-coded cryptographic key in the ss_pu.jar library that enables information disclosure. The issue is part of a group of vulnerabilities (CVE-2017-8949, -8950, -8951, -8952) affecting the same product, with separate weaknesses inc...

HPE SiteScope contains multiple vulnerabilities

Overview HPE's SiteScope is vulnerable to several cryptographic issues, insufficiently protected credentials, and missing authentication. Description HPE's SiteScope is vulnerable to several vulnerabilities. The researcher reports that version 11.31.461 is affected; other versions may also be...