CVE-2017-8950

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2017-8950

HP SiteScope (HP) versions 11.2x–11.3x are affected by CVE-2017-8950, a vulnerability in the ss_pu.jar crypto library that uses a broken or risky cryptographic algorithm, enabling partial information disclosure of credentials. Root cause: use of weak crypto; impact: potential exposure of sensitiv...

HPE SiteScope contains multiple vulnerabilities

Overview HPE's SiteScope is vulnerable to several cryptographic issues, insufficiently protected credentials, and missing authentication. Description HPE's SiteScope is vulnerable to several vulnerabilities. The researcher reports that version 11.31.461 is affected; other versions may also be...